amadan
Merge pull request #273 from carlosframework/multi-region-steering
console: repair the #259 merge (compile fix)
1 file changed,
+11
−11
internal/console/server.go+11 −11
diff --git a/internal/console/server.go b/internal/console/server.go| index a2bb1ebb9..660aef4c2 100644 |
| --- a/internal/console/server.go |
| +++ b/internal/console/server.go |
| @@ -645,6 +645,17 @@ type Server struct { |
| // steeringHost is cfg.SteeringHost, normalized once here — see |
| // dnsTargets, the one reader. |
| steeringHost string |
| + // snsVerify is the SES ingest door's test seam (sesevents.go) — nil |
| + // means "do the real signature verification", which fetches the signing |
| + // certificate over the network. The seam covers signature verification |
| + // ONLY: it never substitutes for the TopicArn or SigningCertURL checks, |
| + // which every caller — production and test alike — runs for real. |
| + snsVerify func(snsEnvelope) error |
| + // snsCerts caches a verified signing certificate's RSA public key by URL |
| + // (sesevents.go) — otherwise every request bearing the deployment's |
| + // TopicArn, which is not a secret, triggers a fresh outbound HTTPS fetch |
| + // and full chain verification. Zero value is ready to use. |
| + snsCerts snsCertCache |
| } |
| // dnsTargets is what every custom-domain guidance string in this console is |
| @@ -670,17 +681,6 @@ func normalizeSteeringHost(raw string) string { |
| return "" |
| } |
| return h |
| - // snsVerify is the SES ingest door's test seam (sesevents.go) — nil |
| - // means "do the real signature verification", which fetches the signing |
| - // certificate over the network. The seam covers signature verification |
| - // ONLY: it never substitutes for the TopicArn or SigningCertURL checks, |
| - // which every caller — production and test alike — runs for real. |
| - snsVerify func(snsEnvelope) error |
| - // snsCerts caches a verified signing certificate's RSA public key by URL |
| - // (sesevents.go) — otherwise every request bearing the deployment's |
| - // TopicArn, which is not a secret, triggers a fresh outbound HTTPS fetch |
| - // and full chain verification. Zero value is ready to use. |
| - snsCerts snsCertCache |
| } |
| // normalizeDelegationZone lowercases, trims, and shape-validates raw (from |