Add type assertion check (spiffe#5058)

Signed-off-by: Matteo Kamm <[email protected]>
InverseIntegral · Nov 27, 2024 · 4ad4ee7 · 4ad4ee7
1 parent 1b407c2
commit 4ad4ee7
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/pkg/server/plugin/keymanager/hashicorpvault/vault_client.go b/pkg/server/plugin/keymanager/hashicorpvault/vault_client.go
@@ -246,7 +246,13 @@ func (c *ClientConfig) configureTLS(vc *vapi.Config) error {
 	if vc.HttpClient == nil {
 		vc.HttpClient = vapi.DefaultConfig().HttpClient
 	}
-	clientTLSConfig := vc.HttpClient.Transport.(*http.Transport).TLSClientConfig
+
+	transport, ok := vc.HttpClient.Transport.(*http.Transport)
+	if !ok {
+		return status.Errorf(codes.Internal, "http client transport is of incorrect type. Expected is %T but was %T", transport, vc.HttpClient.Transport)
+	}
+
+	clientTLSConfig := transport.TLSClientConfig
 
 	var clientCert tls.Certificate
 	foundClientCert := false