INNER CODE UNIT · Rust

bind

deeplethe/forkd · crates/sandstorm-core/src/master/mod.rs:70

            bind = %cfg.bind,
            "the certificate names no address a client elsewhere can dial, so it \
             cannot verify this master; name it with --tls-san"
        );
    }
    // The master's own server cert: nodes verify this, so a fake master
    // cannot collect node connections.
    let server_identity = crate::tls::load_or_issue_master(
        &ca,
        crate::tls::master_sans(cfg.bind.ip(), &cfg.tls_sans),
    )?;
    let ca_fingerprint = crate::tls::fingerprint_of_pem(&server_identity.2)?;

    let st = Arc::new(MasterState::new(
        store,
        ca,
        MasterOptions {
            idle: cfg.idle,

View source record →