Added error if only one of client_certificate_pem and client_private_…

…key_pem are set.
hashicorp · Dec 8, 2022 · 231c24f · 231c24f
1 parent daa4d85
commit 231c24f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/internal/backend/remote-state/http/backend.go b/internal/backend/remote-state/http/backend.go
@@ -137,6 +137,12 @@ func (b *Backend) configureTLS(client *retryablehttp.Client, data *schema.Resour
 	if !skipCertVerification && clientCACertificatePem == "" && clientCertificatePem == "" && clientPrivateKeyPem == "" {
 		return nil
 	}
+	if clientCertificatePem != "" && clientPrivateKeyPem == "" {
+		return fmt.Errorf("client_certificate_pem is set but client_private_key_pem is not")
+	}
+	if clientPrivateKeyPem != "" && clientCertificatePem == "" {
+		return fmt.Errorf("client_private_key_pem is set but client_certificate_pem is not")
+	}
 
 	// TLS configuration is needed; create an object and configure it
 	var tlsConfig tls.Config