prevent generation of ACME key when not using autocert

This commit is contained in:
yusing 2024-12-01 05:08:26 +08:00
parent 863bb3f474
commit d1cb7a5ce4

View file

@ -71,14 +71,17 @@ func (cfg *Config) GetProvider() (*Provider, E.Error) {
var privKey *ecdsa.PrivateKey var privKey *ecdsa.PrivateKey
var err error var err error
if privKey, err = cfg.loadACMEKey(); err != nil { if cfg.Provider != ProviderLocal {
logging.Info().Err(err).Msg("load ACME private key failed, generating one...") if privKey, err = cfg.loadACMEKey(); err != nil {
privKey, err = ecdsa.GenerateKey(elliptic.P256(), rand.Reader) logging.Info().Err(err).Msg("load ACME private key failed")
if err != nil { logging.Info().Msg("generate new ACME private key")
return nil, E.New("generate ACME private key").With(err) privKey, err = ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
} if err != nil {
if err = cfg.saveACMEKey(privKey); err != nil { return nil, E.New("generate ACME private key").With(err)
return nil, E.New("save ACME private key").With(err) }
if err = cfg.saveACMEKey(privKey); err != nil {
return nil, E.New("save ACME private key").With(err)
}
} }
} }