Mercurial > prosody-modules
changeset 4675:c9397cd5cfe6
mod_s2s_auth_samecert: Handle lack of provided client certificate
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Fri, 10 Sep 2021 20:15:19 +0200 |
| parents | 1b701f208b1b |
| children | a2cf3b69a3d6 |
| files | mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua |
| diffstat | 1 files changed, 2 insertions(+), 2 deletions(-) [+] |
line wrap: on
line diff
--- a/mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua Thu Sep 09 20:27:14 2021 +0200 +++ b/mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua Fri Sep 10 20:15:19 2021 +0200 @@ -4,8 +4,8 @@ module:hook("s2s-check-certificate", function(event) local session, cert = event.session, event.cert; - if session.direction ~= "incoming" then return end - + if not cert or session.direction ~= "incoming" then return end + local outgoing = hosts[session.to_host].s2sout[session.from_host]; if outgoing and outgoing.type == "s2sout" and outgoing.secure and outgoing.conn:socket():getpeercertificate():pem() == cert:pem() then session.log("debug", "Certificate matches that of s2sout%s", tostring(outgoing):match("[a-f0-9]+$"));