handle case where r.TLS is nil

JasonN3 · web-flow · commit 7396430e21b3 · 2023-01-24T11:17:44.000-06:00
diff --git a/http/handler.go b/http/handler.go
@@ -543,7 +543,11 @@ func WrapForwardedForHandler(h http.Handler, l *configutil.Listener) http.Handle
 					client_certs = append(client_certs, cert)
 				}
 			}
-			r.TLS.PeerCertificates = client_certs
+			if r.TLS == nil {
+				respondError(w, http.StatusBadRequest, fmt.Errorf("Server must use TLS for certificate authentication"))
+			} else {
+				r.TLS.PeerCertificates = client_certs
+			}
 		}
 		h.ServeHTTP(w, r)
 		return

Original file line number	Diff line number	Diff line change
`@@ -543,7 +543,11 @@ func WrapForwardedForHandler(h http.Handler, l *configutil.Listener) http.Handle`
`543`	`543`	`client_certs = append(client_certs, cert)`
`544`	`544`	`}`
`545`	`545`	`}`
`546`		`- r.TLS.PeerCertificates = client_certs`
	`546`	`+ if r.TLS == nil {`
	`547`	`+ respondError(w, http.StatusBadRequest, fmt.Errorf("Server must use TLS for certificate authentication"))`
	`548`	`+ } else {`
	`549`	`+ r.TLS.PeerCertificates = client_certs`
	`550`	`+ }`
`547`	`551`	`}`
`548`	`552`	`h.ServeHTTP(w, r)`
`549`	`553`	`return`