Correctly validate 'apps.misp.api.*' config settings

tenzir / threatbus

🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.

BSD 3-Clause "New" or "Revised" License

258 stars 16 forks source link

:notebook_with_decorative_cover: Description

The 'apps.misp.api' key is optional, but the code used to assume that if it is present, then all three of the subkeys 'api.host', 'api.ssl' and 'api.key' are also present.

We now validate that this is indeed the case.

:memo: Checklist

[x] All user-facing changes have changelog entries.
[x] The changes are reflected on docs.tenzir.com/threatbus, if necessary.
[x] The PR description contains instructions for the reviewer, if necessary.

:dart: Review Instructions

Try providing an invalid MISP config and verify that threatbus doesn't start and doesn't crash with an unhandled exception.

tenzir / threatbus