Function load_from_paths

nodedb/src/control/cluster/tls.rs:161–186

(paths: &TlsPaths, tls_dir: &Path)

}

fn load_from_paths(paths: &TlsPaths, tls_dir: &Path) -> crate::Result<TlsCredentials> {
    let cert = read_single_cert(&paths.cert)?;
    let key = read_private_key(&paths.key)?;
    let ca_cert = read_single_cert(&paths.ca)?;
    let crls = match &paths.crl {
        Some(p) => read_crls(p)?,
        None => Vec::new(),
    };
    let secret_path = paths
        .cluster_secret
        .clone()
        .unwrap_or_else(|| tls_dir.join(CLUSTER_SECRET_FILE));
    let cluster_secret = read_cluster_secret(&secret_path)?;
    let additional_ca_certs = load_extra_cas(tls_dir)?;
    let spki_pin =
        nodedb_cluster::transport::spki_pin_from_cert_der(cert.as_ref()).unwrap_or([0u8; 32]);
    Ok(TlsCredentials {
        cert,
        key,
        ca_cert,
        additional_ca_certs,
        crls,
        cluster_secret,
        spki_pin,
    })
}

fn load_from_data_dir(tls_dir: &Path) -> crate::Result<TlsCredentials> {
    let cert = read_single_cert(&tls_dir.join(NODE_CERT_FILE))?;