admin: sanitize use of InitialName when needed
This commit is contained in:
parent
51815862f7
commit
8e91e7edbe
3 changed files with 6 additions and 6 deletions
|
@ -19,7 +19,7 @@ func init() {
|
|||
func(_ httprouter.Params, _ []byte) (interface{}, error) { return fic.GenerateCRL() }))
|
||||
|
||||
|
||||
router.GET("/api/teams/:tid/certificate/", apiHandler(teamHandler(GetTeamCertificate)))
|
||||
router.GET("/api/teams/:tid/certificate.p12", apiHandler(teamHandler(GetTeamCertificate)))
|
||||
router.GET("/api/teams/:tid/certificate/generate", apiHandler(teamHandler(
|
||||
func(team fic.Team, _ []byte) (interface{}, error) { return team.GenerateCert() })))
|
||||
router.GET("/api/teams/:tid/certificate/revoke", apiHandler(teamHandler(
|
||||
|
@ -49,9 +49,9 @@ func GetCRL(_ httprouter.Params, _ []byte) (interface{}, error) {
|
|||
|
||||
|
||||
func GetTeamCertificate(team fic.Team, _ []byte) (interface{}, error) {
|
||||
if _, err := os.Stat("../PKI/pkcs/" + team.Name + ".p12"); os.IsNotExist(err) {
|
||||
if _, err := os.Stat("../PKI/pkcs/" + team.InitialName + ".p12"); os.IsNotExist(err) {
|
||||
return nil, errors.New("Unable to locate the p12. Have you generated it?")
|
||||
} else if fd, err := os.Open("../PKI/pkcs/" + team.Name + ".p12"); err == nil {
|
||||
} else if fd, err := os.Open("../PKI/pkcs/" + team.InitialName + ".p12"); err == nil {
|
||||
return ioutil.ReadAll(fd)
|
||||
} else {
|
||||
return nil, err
|
||||
|
|
|
@ -59,7 +59,7 @@ func init() {
|
|||
return team.GetMembers() })))
|
||||
router.GET("/api/teams/:tid/name", apiHandler(teamHandler(
|
||||
func(team fic.Team, _ []byte) (interface{}, error) {
|
||||
return team.Name, nil })))
|
||||
return team.InitialName, nil })))
|
||||
}
|
||||
|
||||
func nginxGenMember() (string, error) {
|
||||
|
|
|
@ -23,13 +23,13 @@ func GenerateCRL() (string, error) {
|
|||
}
|
||||
|
||||
func (t Team) GenerateCert() (string, error) {
|
||||
cmd := exec.Command("/bin/bash", "./CA.sh", "-newclient", t.Name)
|
||||
cmd := exec.Command("/bin/bash", "./CA.sh", "-newclient", t.InitialName)
|
||||
|
||||
return convOutput(cmd.CombinedOutput())
|
||||
}
|
||||
|
||||
func (t Team) RevokeCert() (string, error) {
|
||||
cmd := exec.Command("/bin/bash", "./CA.sh", "-revoke", t.Name)
|
||||
cmd := exec.Command("/bin/bash", "./CA.sh", "-revoke", t.InitialName)
|
||||
|
||||
return convOutput(cmd.CombinedOutput())
|
||||
}
|
||||
|
|
Reference in a new issue