# HG changeset patch
# User Stephen Paul Weber <singpolyma@singpolyma.net>
# Date 1777430423 18000
# Node ID c9836434a9d5af06e164075cf9412d36dc1535af
# Parent  c4d3f0c208e973d8cbdd8bad6733b456bbe514b7
mod_push2: warn instead of crash on bad/empty key

diff -r c4d3f0c208e9 -r c9836434a9d5 mod_push2/mod_push2.lua
--- a/mod_push2/mod_push2.lua	Fri Apr 24 12:49:43 2026 +0200
+++ b/mod_push2/mod_push2.lua	Tue Apr 28 21:40:23 2026 -0500
@@ -319,7 +319,13 @@
 		key = "-----BEGIN PRIVATE KEY-----\n"..key.."\n-----END PRIVATE KEY-----"
 	end
 
-	local public_key = crypto.import_private_pem(key):public_raw()
+	local private_key = crypto.import_private_pem(key)
+	if not private_key then
+		module:log("warn", "Bad key for %q", match)
+		return
+	end
+
+	local public_key = private_key:public_raw()
 	local signer = jwt.new_signer(match.jwt_alg, key)
 	local payload = {}
 	for k, v in pairs(match.jwt_claims or {}) do