(ctx context.Context, wr http.ResponseWriter, req *http.Request)
| 94 | } |
| 95 | |
| 96 | func (auth *CertAuth) Validate(ctx context.Context, wr http.ResponseWriter, req *http.Request) (string, bool) { |
| 97 | if req.TLS == nil || len(req.TLS.VerifiedChains) < 1 || len(req.TLS.VerifiedChains[0]) < 1 { |
| 98 | return auth.handleReject(ctx, wr, req) |
| 99 | } |
| 100 | eeCert := req.TLS.VerifiedChains[0][0] |
| 101 | if auth.blacklist.Load().file.Has(eeCert.SerialNumber) { |
| 102 | return auth.handleReject(ctx, wr, req) |
| 103 | } |
| 104 | if auth.next != nil { |
| 105 | return auth.next.Validate(ctx, wr, req) |
| 106 | } |
| 107 | return fmt.Sprintf( |
| 108 | "Subject: %s, Serial Number: %s", |
| 109 | eeCert.Subject.String(), |
| 110 | formatSerial(eeCert.SerialNumber), |
| 111 | ), true |
| 112 | } |
| 113 | |
| 114 | func (auth *CertAuth) Close() error { |
| 115 | var err error |
nothing calls this directly
no test coverage detected