personal_interest_mirrors/nebula
1
0
Fork 0
mirror of https://github.com/slackhq/nebula.git synced 2026-08-16 13:47:02 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

return err instead of panic

Browse Source
This commit is contained in:
Wade Simmons
2026-07-23 10:52:06 -04:00
parent 6be3d2264e
commit e16a31ff6a
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pki.go
+2 -2
View File
@@ -243,7 +243,7 @@ func newCipherSuite(curve cert.Curve, pkcs11backed bool, cipher string) (noise.C
switch curve { switch curve {
case cert.Curve_CURVE25519: case cert.Curve_CURVE25519:
if fips140.Enforced() { if fips140.Enforced() {
panic("pki: use of Curve25519 is not allowed in FIPS 140-only mode") return nil, errors.New("pki: use of Curve25519 is not allowed in FIPS 140-only mode")
} }
dhFunc = noise.DH25519 dhFunc = noise.DH25519
case cert.Curve_P256: case cert.Curve_P256:
@@ -258,7 +258,7 @@ func newCipherSuite(curve cert.Curve, pkcs11backed bool, cipher string) (noise.C
if cipher == "chachapoly" { if cipher == "chachapoly" {
if fips140.Enforced() { if fips140.Enforced() {
panic("pki: use of ChaChaPoly is not allowed in FIPS 140-only mode") return nil, errors.New("pki: use of ChaChaPoly is not allowed in FIPS 140-only mode")
} }
return noise.NewCipherSuite(dhFunc, noise.CipherChaChaPoly, noise.HashSHA256), nil return noise.NewCipherSuite(dhFunc, noise.CipherChaChaPoly, noise.HashSHA256), nil
} }