zero: derive signing key first thing (#4631)

pomerium · Oct 20, 2023 · b027da9 · b027da9
1 parent 91189dc
commit b027da9
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/internal/zero/bootstrap/new.go b/internal/zero/bootstrap/new.go
@@ -43,14 +43,14 @@ func New(secret []byte) (*Source, error) {
 
 	rnd := hkdf.New(sha256.New, secret, nil, nil)
 
-	cipher, err := initCipher(rnd)
+	err = initSecrets(cfg, rnd)
 	if err != nil {
-		return nil, fmt.Errorf("init cypher: %w", err)
+		return nil, fmt.Errorf("init secrets: %w", err)
 	}
 
-	err = initSecrets(cfg, rnd)
+	cipher, err := initCipher(rnd)
 	if err != nil {
-		return nil, fmt.Errorf("init secrets: %w", err)
+		return nil, fmt.Errorf("init cypher: %w", err)
 	}
 
 	svc := &Source{