chore(cmd/immudb/command): handle tls configuration errors

Signed-off-by: Michele Meloni <[email protected]>
codenotary · May 7, 2021 · 08681b0 · 08681b0
1 parent 38d96a1
commit 08681b0
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/cmd/immudb/command/tls_config.go b/cmd/immudb/command/tls_config.go
@@ -38,7 +38,12 @@ func setUpTLS(pkey, cert, ca string, mtls bool) (*tls.Config, error) {
 		}
 	}
 
-	if mtls {
+	if mtls && (cert == "" || pkey == "") {
+		return nil, errors.New("in order to enable MTLS a certificate and private key are required")
+	}
+
+	// if CA is not provided there is an automatic load of local CA in os
+	if mtls && ca != "" {
 		certPool := x509.NewCertPool()
 		// Trusted store, contain the list of trusted certificates. client has to use one of this certificate to be trusted by this server
 		bs, err := ioutil.ReadFile(ca)