From bcf830c29aa2b73a04f0108cd22ae420e095de4c Mon Sep 17 00:00:00 2001
From: Haruue <i@haruue.moe>
Date: Sat, 24 Aug 2024 13:41:46 +0800
Subject: [PATCH] chore: only init cert.Leaf when not populated

since Go 1.23, cert.Leaf will be populated after loaded.

see doc of tls.LoadX509KeyPair for details
---
 app/internal/utils/certloader.go | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/app/internal/utils/certloader.go b/app/internal/utils/certloader.go
index 6e4a7be..fb41a3c 100644
--- a/app/internal/utils/certloader.go
+++ b/app/internal/utils/certloader.go
@@ -94,9 +94,12 @@ func (l *LocalCertificateLoader) makeCache() (cache *localCertificateCache, err
 		return
 	}
 	c.certificate = &cert
-	c.certificate.Leaf, err = x509.ParseCertificate(cert.Certificate[0])
-	if err != nil {
-		return
+	if c.certificate.Leaf == nil {
+		// certificate.Leaf was left nil by tls.LoadX509KeyPair before Go 1.23
+		c.certificate.Leaf, err = x509.ParseCertificate(cert.Certificate[0])
+		if err != nil {
+			return
+		}
 	}
 
 	cache = c