update SSL variables

Author: neighbor-peace

server/controllers/mysqlData.controller.js

@@ -5,6 +5,12 @@ const dotenv = require('dotenv');
 dotenv.config();
 
 const mySQLdataController = {};
+const SSL_KEY =
+  Buffer.from(process.env.SSL_KEY, 'base64').toString('ascii') ||
+  fs.readFileSync('./.cert/key.pem').toString();
+const SSL_CERT =
+  Buffer.from(process.env.SSL_CERT, 'base64').toString('ascii') ||
+  fs.readFileSync('./.cert/cert.pem').toString();
 
 /**
  * mySQLdataController.getSchema
@@ -28,14 +34,9 @@ export const getSchema = async (req, res, next) => {
         port,
         user: username,
         database: database_name,
-        // Add SSL certification to avoid security issue.
         ssl: {
-          key:
-            fs.readFileSync('./.cert/key.pem').toString() ||
-            Buffer.from(process.env.SSL_KEY, 'base64').toString('ascii'),
-          cert:
-            fs.readFileSync('./.cert/cert.pem').toString() ||
-            Buffer.from(process.env.SSL_CERT, 'base64').toString('ascii'),
+          key: SSL_KEY,
+          cert: SSL_CERT,
         },
       },
       dumpToFile: '../db_schemas',

server/models/userModel.ts

@@ -6,8 +6,10 @@ const dotenv = require('dotenv');
 dotenv.config();
 
 const { USER_DB_USER, USER_DB_PW } = process.env;
-const SSL_KEY = process.env.SSL_KEY as string;
-const SSL_CERT = process.env.SSL_CERT as string;
+const SSL_KEY =
+  (process.env.SSL_KEY as string) || fs.readFileSync('./.cert/key.pem').toString();
+const SSL_CERT =
+  (process.env.SSL_CERT as string) || fs.readFileSync('./.cert/cert.pem').toString();
 
 const pool = mysql
   .createPool({
@@ -17,12 +19,8 @@ const pool = mysql
     password: USER_DB_PW,
     database: 'dbspy_4',
     ssl: {
-      key:
-        fs.readFileSync('./.cert/key.pem').toString() ||
-        Buffer.from(SSL_KEY, 'base64').toString('ascii'),
-      cert:
-        fs.readFileSync('./.cert/cert.pem').toString() ||
-        Buffer.from(SSL_CERT, 'base64').toString('ascii'),
+      key: SSL_KEY,
+      cert: SSL_CERT,
     },
   })
   .promise(); // wrap with promise API