Ensure safety_buffer in PKI is greater than zero

Fixes #4641
hashicorp · May 28, 2018 · 7590a7b · 7590a7b
1 parent 95978c2
commit 7590a7b
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/builtin/logical/pki/path_tidy.go b/builtin/logical/pki/path_tidy.go
@@ -53,6 +53,10 @@ func (b *backend) pathTidyWrite(ctx context.Context, req *logical.Request, d *fr
 	tidyCertStore := d.Get("tidy_cert_store").(bool)
 	tidyRevocationList := d.Get("tidy_revocation_list").(bool)
 
+	if safetyBuffer < 1 {
+		return logical.ErrorResponse("safety_buffer must be greater than zero"), nil
+	}
+
 	bufferDuration := time.Duration(safetyBuffer) * time.Second
 
 	var resp *logical.Response