From 14210d9c819c3e4704a3fce155b080c9924adfd9 Mon Sep 17 00:00:00 2001 From: Quentin McGaw Date: Sat, 13 Aug 2022 18:46:08 +0000 Subject: [PATCH] Unset sensitive environment variables after reading them --- internal/configuration/sources/env/openvpn.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/internal/configuration/sources/env/openvpn.go b/internal/configuration/sources/env/openvpn.go index b58b109ab..35e3ae284 100644 --- a/internal/configuration/sources/env/openvpn.go +++ b/internal/configuration/sources/env/openvpn.go @@ -11,7 +11,8 @@ import ( func (r *Reader) readOpenVPN() ( openVPN settings.OpenVPN, err error) { defer func() { - err = unsetEnvKeys([]string{"OPENVPN_CLIENTKEY", "OPENVPN_CLIENTCRT"}, err) + err = unsetEnvKeys([]string{"OPENVPN_CLIENTKEY", "OPENVPN_CLIENTCRT", + "OPENVPN_KEY_PASSPHRASE", "OPENVPN_ENCRYPTED_KEY"}, err) }() openVPN.Version = getCleanedEnv("OPENVPN_VERSION")