Base64-decode submitted blobs and treat them as leaf certs.

1 files changed, 8 insertions, 2 deletions

diff --git a/src/v1.erl b/src/v1.erl
index eb35ee7..40e93f2 100644
--- a/src/v1.erl
+++ b/src/v1.erl
@@ -153,6 +153,12 @@ add_blob(Input) ->
         {error, E} ->
             err400("add-blob: bad input:", E);
         {struct, [{<<"blob">>, Blob}]} ->
-            success(catlfish:add_chain(Blob, normal));
-        _ -> err400("add-blob: missing input: blob", Input)
+            case (catch base64:decode(Blob)) of
+                {'EXIT', _} ->
+                    err400("add-blob: invalid base64-encoded blob", Blob);
+                DecodedBlob ->
+                    success(catlfish:add_chain(DecodedBlob, [], normal))
+            end;
+        _ ->
+            err400("add-blob: missing input: blob", Input)
     end.