Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-24 09:28:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 31

feat: write encrypted apns cert

Browse source
This commit is contained in:
Jahziel Villasana-Espinoza 2024-05-24 18:03:20 -04:00
parent 3b065f1ddb
commit c808588e1b
1 changed files with 11 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
server/service/mdm.go
View file

@ -13,7 +13,6 @@ import (
"errors"
"fmt"
"io"
"log/slog"
"mime/multipart"
"net/http"
"path/filepath"
@ -2346,7 +2345,10 @@ func (svc *Service) UploadMDMAppleAPNSCert(ctx context.Context, cert io.ReadSeek
return err
}
slog.With("filename", "server/service/mdm.go", "func", "UploadMDMAppleAPNSCert").Info("JVE_LOG: env var value ", "var", svc.config.Server.PrivateKey)
if len(svc.config.Server.PrivateKey) == 0 {
return ctxerr.Wrap(ctx, errors.New("no private key configured"))
}
if cert == nil {
return ctxerr.Wrap(ctx, fleet.NewInvalidArgumentError("certificate", "Invalid certificate. Please provide a valid certificate from Apple Push Certificate Portal."))
}
@ -2363,11 +2365,16 @@ func (svc *Service) UploadMDMAppleAPNSCert(ctx context.Context, cert io.ReadSeek
return ctxerr.Wrap(ctx, fleet.NewInvalidArgumentError("certificate", "Invalid certificate. Please provide a valid certificate from Apple Push Certificate Portal."))
}
// Save to DB
// Save to DB encrypted
encryptedCert, err := Encrypt(certBytes, svc.config.Server.PrivateKey)
if err != nil {
return ctxerr.Wrap(ctx, err, "encrypting apns certificate")
}
return ctxerr.Wrap(
ctx,
svc.ds.InsertMDMConfigAssets(ctx, []fleet.MDMConfigAsset{
{Name: fleet.MDMAssetAPNSCert, Value: certBytes},
{Name: fleet.MDMAssetAPNSCert, Value: encryptedCert},
}),
"writing apns cert to db",
)