Raise error when public key is invalid

voxpupuli · May 8, 2024 · 87544ab · 87544ab
1 parent 3e5e1b1
commit 87544ab
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/lib/hiera/backend/eyaml/encryptors/pkcs7.rb b/lib/hiera/backend/eyaml/encryptors/pkcs7.rb
@@ -43,6 +43,8 @@ def self.encrypt(plaintext)
               public_key_rsa = OpenSSL::PKey::RSA.new(public_key_pem)
               public_key_x509 = OpenSSL::X509::Certificate.new
               public_key_x509.public_key = public_key_rsa.public_key
+            else
+              raise StandardError, "file #{public_key_pem} cannot be used to encrypt - invalid public key format"
             end
 
             cipher = OpenSSL::Cipher.new('aes-256-cbc')