EN-949: public_cert_data should be base64 encoded and without the lea…

…ding and trailing markers
quantum-sec · Aug 2, 2022 · b527344 · b527344
1 parent 4f46b6e
commit b527344
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/azure-virtual-network-gateway/main.tf b/modules/azure-virtual-network-gateway/main.tf
@@ -59,7 +59,7 @@ resource "azurerm_virtual_network_gateway" "gateway" {
         for_each = lookup(vpn_client_configuration.value, "root_certificate", null) != null ? vpn_client_configuration.value["root_certificate"] : []
         content {
           name             = root_certificate.value["name"]
-          public_cert_data = root_certificate.value["public_cert_data"]
+          public_cert_data = try(base64encode(trimspace(replace(root_certificate.value["public_cert_data"], "/[-]+(BEGIN|END) CERTIFICATE[-]+/", ""))), null)
         }
       }