1
0
Fork 0
mirror of https://github.com/puma/puma.git synced 2022-11-09 13:48:40 -05:00
puma--puma/lib
Stan Hu f4fb51deb7
Fail hard if SSL certs or keys cannot be read by user (#2847)
* Fail hard if SSL certs or keys cannot be read by user

Previously if an SSL cert or key could not be read, Puma would bind to
the configured SSL port but not accept any connections. The only
indication that something went awry is an obscure log message:

```
 #<Puma::MiniSSL::SSLError: OpenSSL error: error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher - 193>
```

We now fail hard with an exception if this happens to make it clear
that the permissions need to be fixed.

Relates to https://github.com/puma/puma/issues/1339

* minissl.rb - add check_file method

Co-authored-by: MSP-Greg <Greg.mpls@gmail.com>
2022-04-02 15:19:21 -06:00
..
puma Fail hard if SSL certs or keys cannot be read by user (#2847) 2022-04-02 15:19:21 -06:00
rack/handler [WIP] Refactor: Split out LogWriter from Events (no logic change) (#2798) 2022-02-05 10:06:22 -07:00
puma.rb Rename Puma::JSON to Puma::JSONSerialization (#2640) 2021-06-09 08:55:45 -06:00