curben
/
cloudflared-mirror
mirror of https://github.com/cloudflare/cloudflared.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix: Don't try to read certs for remotely-managed tunnels (Closes #1037)

This commit is contained in:
Func 2025-08-27 02:01:06 +08:00
parent f9c2bd51ae
commit 151df44104
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
cmd/cloudflared/tunnel/cmd.go
View File

@ -459,12 +459,18 @@ func StartServer(
}
}
userCreds, err := credentials.Read(c.String(cfdflags.OriginCert), log)
var isFEDEndpoint bool
if err != nil {
isFEDEndpoint = false
// For remotely-managed tunnels: use endpoint info from token credentials
if c.String(TunnelTokenFlag) != "" {
isFEDEndpoint = strings.ToLower(namedTunnel.Credentials.Endpoint) == credentials.FedEndpoint
} else {
isFEDEndpoint = userCreds.IsFEDEndpoint()
// For locally-managed tunnels: check origin certificate
userCreds, err := credentials.Read(c.String(cfdflags.OriginCert), log)
if err != nil {
isFEDEndpoint = false
} else {
isFEDEndpoint = userCreds.IsFEDEndpoint()
}
}
var managementHostname string