Add missing reader lock to File CA when reading certificate chain (#493)

Signed-off-by: Hayden Blauzvern <hblauzvern@google.com>
sigstore · Mar 29, 2022 · 29a36bb · 29a36bb
1 parent 61c9601
commit 29a36bb
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkg/ca/fileca/fileca.go b/pkg/ca/fileca/fileca.go
@@ -99,6 +99,9 @@ func (fca *fileCA) CreateCertificate(_ context.Context, subject *challenges.Chal
 		return nil, err
 	}
 
+	fca.RLock()
+	defer fca.RUnlock()
+
 	return ca.CreateCSCFromDER(subject, finalCertBytes, fca.certs)
 }