direktil/local-server
4
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

don't write secret-data if not needed

Browse Source
This commit is contained in:
Mikaël Cluseau
2019-12-19 16:57:22 +01:00
parent 55c72aefa8
commit 863a436915
4 changed files with 28 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
cmd/dkl-local-server/secrets.go
View File

@ -13,6 +13,7 @@ import (
"sort"
"sync"
"github.com/cespare/xxhash"
"github.com/cloudflare/cfssl/config"
"github.com/cloudflare/cfssl/csr"
"github.com/cloudflare/cfssl/helpers"
@ -32,6 +33,8 @@ var (
type SecretData struct {
l sync.Mutex
prevHash uint64
clusters map[string]*ClusterSecrets
changed bool
config *config.Config
@ -85,6 +88,8 @@ func loadSecretData(config *config.Config) (err error) {
return
}
sd.prevHash = xxhash.Sum64(ba)
secretData = sd
return
}
@ -93,20 +98,32 @@ func (sd *SecretData) Changed() bool {
return sd.changed
}
func (sd *SecretData) Save() error {
func (sd *SecretData) Save() (err error) {
if DontSave {
return nil
return
}
sd.l.Lock()
defer sd.l.Unlock()
log.Info("Saving secret data")
ba, err := json.Marshal(sd.clusters)
if err != nil {
return err
return
}
return ioutil.WriteFile(secretDataPath(), ba, 0600)
h := xxhash.Sum64(ba)
if h == sd.prevHash {
return
}
log.Info("Saving secret data")
err = ioutil.WriteFile(secretDataPath(), ba, 0600)
if err == nil {
sd.prevHash = h
}
return
}
func newClusterSecrets() *ClusterSecrets {