dyzulk/trustlab-api
1
0
Fork 0
mirror of https://github.com/dyzulk/trustlab-api.git synced 2026-01-26 05:15:35 +07:00
Code Issues Packages Projects Releases Wiki Activity

Fix: Make OpenSslService robust against installer failures and missing Root

Browse Source
This commit is contained in:
dyzulk
2026-01-08 09:26:39 +07:00
parent 4fd5d60802
commit 2175615220
1 changed files with 22 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
app/Services/OpenSslService.php
View File

@@ -453,6 +453,12 @@ class OpenSslService
// 1. Get current latest Root
$root = CaCertificate::where('ca_type', 'root')->where('is_latest', true)->first();
// Fallback: If no 'is_latest' found (inconsistent state), take the most recent one
if (!$root) {
$root = CaCertificate::where('ca_type', 'root')->latest()->first();
}
if (!$root) throw new \Exception("Current Root CA not found.");
// 2. Renew Root
@@ -469,8 +475,12 @@ class OpenSslService
// 4. Final Mass Sync
// 4. Final Mass Sync
try {
$installerService = app(\App\Services\CaInstallerService::class);
$installerService->syncAllBundles();
} catch (\Exception $e) {
\Log::error("Failed to sync bundles after bulk renew: " . $e->getMessage());
}
return true;
}
@@ -505,8 +515,16 @@ class OpenSslService
// Sync to CDN
$this->uploadPublicCertsOnly($newCert, 'both');
// Sync to CDN
$this->uploadPublicCertsOnly($newCert, 'both');
try {
$installerService = app(\App\Services\CaInstallerService::class);
$installerService->uploadIndividualInstallersOnly($newCert, 'both');
} catch (\Exception $e) {
\Log::error("Failed to generate installers for renewed cert: " . $e->getMessage());
// We do not re-throw, so the renewal itself is considered successful
}
return $newCert;
}