mirror of https://github.com/namecoin/ncdns
certinject: Fix various issues found by static analysis.
parent
2c8b5fe5ee
commit
145d1e32cd
@ -1,11 +1,14 @@
|
||||
package certinject
|
||||
|
||||
import (
|
||||
"gopkg.in/hlandau/easyconfig.v1/cflag"
|
||||
"gopkg.in/hlandau/easyconfig.v1/cflag"
|
||||
)
|
||||
|
||||
var (
|
||||
flagGroup = cflag.NewGroup(nil, "certstore")
|
||||
nssFlag = cflag.Bool(flagGroup, "nss", false, nssExplain)
|
||||
certExpirePeriod = cflag.Int(flagGroup, "expire", 60 * 30, "Duration (in seconds) after which TLS certs will be removed from the trust store. Making this smaller than the DNS TTL (default 600) may cause TLS errors.")
|
||||
flagGroup = cflag.NewGroup(nil, "certstore")
|
||||
nssFlag = cflag.Bool(flagGroup, "nss", false, nssExplain)
|
||||
certExpirePeriod = cflag.Int(flagGroup, "expire", 60*30, "Duration "+
|
||||
"(in seconds) after which TLS certs will be removed from the "+
|
||||
"trust store. Making this smaller than the DNS TTL (default "+
|
||||
"600) may cause TLS errors.")
|
||||
)
|
||||
|
@ -1,5 +1,11 @@
|
||||
package certinject
|
||||
|
||||
var (
|
||||
nssExplain = "Synchronize TLS certs to an NSS sqlite3 trust store? This enables HTTPS to work with NSS web browsers such as Chromium/Chrome. Only use if you've set up NUMS HPKP in Chromium/Chrome as per documentation. If you haven't set up NUMS HPKP, or if you access the configured NSS sqlite3 trust store from browsers not based on Chromium, this is unsafe and should not be used."
|
||||
nssExplain = "Synchronize TLS certs to an NSS sqlite3 trust store? " +
|
||||
"This enables HTTPS to work with NSS web browsers such as " +
|
||||
"Chromium/Chrome. Only use if you've set up NUMS HPKP in " +
|
||||
"Chromium/Chrome as per documentation. If you haven't set " +
|
||||
"up NUMS HPKP, or if you access the configured NSS sqlite3 " +
|
||||
"trust store from browsers not based on Chromium, this is " +
|
||||
"unsafe and should not be used."
|
||||
)
|
||||
|
@ -1,5 +1,5 @@
|
||||
package certinject
|
||||
|
||||
var (
|
||||
const (
|
||||
nssCertutilName = "nss-certutil"
|
||||
)
|
||||
|
Loading…
Reference in New Issue