1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
|
# frozen_string_literal: true
module Puppet::SSL
class SSLError < Puppet::Error; end
class CertVerifyError < Puppet::SSL::SSLError
attr_reader :code, :cert
def initialize(message, code, cert)
super(message)
@code = code
@cert = cert
end
end
class CertMismatchError < Puppet::SSL::SSLError
def initialize(peer_cert, host)
valid_certnames = [peer_cert.subject.to_utf8.sub(/.*=/, ''),
*Puppet::SSL::Certificate.subject_alt_names_for(peer_cert)].uniq
if valid_certnames.size > 1
expected_certnames = _("expected one of %{certnames}") % { certnames: valid_certnames.join(', ') }
else
expected_certnames = _("expected %{certname}") % { certname: valid_certnames.first }
end
super(_("Server hostname '%{host}' did not match server certificate; %{expected_certnames}") % { host: host, expected_certnames: expected_certnames })
end
end
end
|
