v0.33.8

src/admin/certificates.rs

@@ -4,12 +4,6 @@ async fn certificate_deploy(
     certificate_api_access: Option<Extension<CertificateApiAccess>>,
     Json(input): Json<CertificateDeploy>,
 ) -> Result<Json<Value>, ApiError> {
-    let directory = state.policy.cert_dir.clone().ok_or_else(|| {
-        ApiError(
-            StatusCode::CONFLICT,
-            "certificate storage is unavailable; configure the certificate directory".into(),
-        )
-    })?;
     let CertificateDeploy {
         certificate_id,
         cert_pem,
@@ -30,6 +24,13 @@ async fn certificate_deploy(
             ));
         }
     }
+    // Check the credential scope before disclosing certificate storage state.
+    let directory = state.policy.cert_dir.clone().ok_or_else(|| {
+        ApiError(
+            StatusCode::CONFLICT,
+            "certificate storage is unavailable; configure the certificate directory".into(),
+        )
+    })?;
 
     let snapshot = state.config.load_full();
     let expected_revision = snapshot.envelope.revision;