refactor: add error log for self signed certificate fail

vicanso · Dec 15, 2024 · eb97a4d · eb97a4d
1 parent f1b2f6f
commit eb97a4d
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 11 deletions.
diff --git a/src/config/common.rs b/src/config/common.rs
@@ -1347,7 +1347,7 @@ ai02RHnemmqJaNepfmCdyec=
         let result = conf.validate();
         assert_eq!(true, result.is_ok());
 
-        assert_eq!("488642d0e54f33b6", conf.hash_key());
+        assert_eq!("df7255ff75e0f40c", conf.hash_key());
     }
 
     #[test]

diff --git a/src/proxy/dynamic_certificate.rs b/src/proxy/dynamic_certificate.rs
@@ -482,16 +482,22 @@ impl pingora::listeners::TlsAccept for DynamicCertificate {
 
         // root ca
         if d.is_root {
-            if let Ok(result) =
-                d.get_self_signed_cert(server_name.unwrap_or_default())
-            {
-                ssl_certificate(
-                    ssl,
-                    &result.0,
-                    &result.1,
-                    &d.chain_certificate,
-                );
-            }
+            match d.get_self_signed_cert(server_name.unwrap_or_default()) {
+                Ok(result) => {
+                    ssl_certificate(
+                        ssl,
+                        &result.0,
+                        &result.1,
+                        &d.chain_certificate,
+                    );
+                },
+                Err(err) => {
+                    error!(
+                        error = err.to_string(),
+                        "get self signed cert fail"
+                    );
+                },
+            };
             return;
         }