pinecrypt/pinecrypt-gateway-firewall
2
1
Fork 0
Code Issues 3 Pull Requests Projects Activity

More explicit error messages for signed cert lookup

Browse Source
This commit is contained in:
Lauri Võsandi 2021-06-25 19:08:37 +00:00
parent db03116c63
commit 591802b01e
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
firewall.py
View File

@ -126,6 +126,7 @@ async def update_firewall_rules():
os.system("ipset create -exist -quiet ipset6-mongo-replicas hash:ip family inet6") os.system("ipset create -exist -quiet ipset6-mongo-replicas hash:ip family inet6")
apply_firewall_rules(disabled=True) apply_firewall_rules(disabled=True)
print("Looking up signed certificate for common name: %s" % FQDN)
db = AsyncIOMotorClient(MONGO_URI).get_default_database() db = AsyncIOMotorClient(MONGO_URI).get_default_database()
@ -136,7 +137,7 @@ async def update_firewall_rules():
doc = await db.certidude_certificates.find_one(q) doc = await db.certidude_certificates.find_one(q)
if not doc: if not doc:
print("Unable to lookup signed certificate for %s" % FQDN) print("Unable to lookup signed certificate for common name %s" % FQDN)
sys.exit(1) sys.exit(1)
apply_firewall_rules(disabled=doc["disabled"]) apply_firewall_rules(disabled=doc["disabled"])