Function read_single_cert

nodedb/src/control/cluster/tls.rs:379–394

(path: &Path)

}

fn read_single_cert(path: &Path) -> crate::Result<CertificateDer<'static>> {
    let bytes = fs::read(path).map_err(|e| crate::Error::Config {
        detail: format!("read cert {}: {e}", path.display()),
    })?;
    let mut reader = BufReader::new(&bytes[..]);
    let mut iter = rustls_pemfile::certs(&mut reader);
    match iter.next() {
        Some(Ok(cert)) => Ok(cert),
        Some(Err(e)) => Err(crate::Error::Config {
            detail: format!("parse cert {}: {e}", path.display()),
        }),
        None => Err(crate::Error::Config {
            detail: format!("cert file {} contains no PEM certificates", path.display()),
        }),
    }
}

fn read_private_key(path: &Path) -> crate::Result<PrivateKeyDer<'static>> {
    ensure_secret_file_perms(path)?;