(filename string)
| 1025 | } |
| 1026 | |
| 1027 | func readSCEPDecrypterKey(filename string) ([]byte, error) { |
| 1028 | b, err := os.ReadFile(filename) |
| 1029 | if err != nil { |
| 1030 | return nil, fmt.Errorf("failed reading %q: %w", filename, err) |
| 1031 | } |
| 1032 | |
| 1033 | if err := validateSCEPDecrypterKey(b); err != nil { |
| 1034 | return nil, fmt.Errorf("failed decoding %q: %w", filename, err) |
| 1035 | } |
| 1036 | |
| 1037 | // TODO(hs): additional validation that this is an (encrypted) private key? |
| 1038 | |
| 1039 | return b, err |
| 1040 | } |
| 1041 | |
| 1042 | func validateSCEPDecrypterKey(data []byte) error { |
| 1043 | block, rest := pem.Decode(data) |
no test coverage detected
searching dependent graphs…