pepperdash/Essentials
1
0
Fork 0
mirror of https://github.com/PepperDash/Essentials.git synced 2026-07-02 10:38:16 +00:00
Code Issues Projects Releases Packages Wiki Activity

fix: validate certificate for private key presence in DebugWebsocketSink

Browse source 
Co-authored-by: Copilot <copilot@github.com>
This commit is contained in:
Neil Dorin 2026-05-11 09:55:27 -06:00
parent a9dd57fdaf
commit b318e7f365
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/PepperDash.Core/Logging/DebugWebsocketSink.cs
View file

@ -262,7 +262,13 @@ namespace PepperDash.Core
using (var ms = new MemoryStream())
{
store.Save(ms, passwordChars, new SecureRandom());
return new X509Certificate2(ms.ToArray(), certPassword);
var cert = new X509Certificate2(ms.ToArray(), certPassword);
if (!cert.HasPrivateKey)
throw new InvalidOperationException(
string.Format("Certificate loaded from '{0}' does not contain a private key and cannot be used as a server certificate.", certPath));
return cert;
}
}
}