Restrict QUIC to use single self signed client cert (backport #29681) (…

…#29683) Restrict QUIC to use single self signed client cert (#29681) (cherry picked from commit 1d0a28c) Co-authored-by: Pankaj Garg <[email protected]>
solana-labs · Jan 12, 2023 · 46fde27 · 46fde27
1 parent e7a57ca
commit 46fde27
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/streamer/src/tls_certificates.rs b/streamer/src/tls_certificates.rs
@@ -57,7 +57,8 @@ pub fn new_self_signed_tls_certificate_chain(
 }
 
 pub fn get_pubkey_from_tls_certificate(certificates: &[rustls::Certificate]) -> Option<Pubkey> {
-    certificates.first().and_then(|der_cert| {
+    if certificates.len() == 1 {
+        let der_cert = &certificates[0];
         X509Certificate::from_der(der_cert.as_ref())
             .ok()
             .and_then(|(_, cert)| {
@@ -66,7 +67,9 @@ pub fn get_pubkey_from_tls_certificate(certificates: &[rustls::Certificate]) ->
                     _ => None,
                 })
             })
-    })
+    } else {
+        None
+    }
 }
 
 #[cfg(test)]