prosody-modules
3024116d6093
mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody-modules

Comparison

mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua @ 2234:3024116d6093

mod_s2s_auth_samecert: Log which s2sout has a matching cert
author Kim Alvefur <zash@zash.se>
date Fri, 08 Jul 2016 22:37:48 +0200
parent 2204:affccf479f89
child 4675:c9397cd5cfe6
comparison
equal deleted inserted replaced
2233:dd806ebeb2fc 2234:3024116d6093
6 local session, cert = event.session, event.cert; 6 local session, cert = event.session, event.cert;
7 if session.direction ~= "incoming" then return end 7 if session.direction ~= "incoming" then return end
8 8
9 local outgoing = hosts[session.to_host].s2sout[session.from_host]; 9 local outgoing = hosts[session.to_host].s2sout[session.from_host];
10 if outgoing and outgoing.type == "s2sout" and outgoing.secure and outgoing.conn:socket():getpeercertificate():pem() == cert:pem() then 10 if outgoing and outgoing.type == "s2sout" and outgoing.secure and outgoing.conn:socket():getpeercertificate():pem() == cert:pem() then
11 session.log("debug", "Certificate matches that of s2sout%s", tostring(outgoing):match("[a-f0-9]+$"));
11 session.cert_identity_status = outgoing.cert_identity_status; 12 session.cert_identity_status = outgoing.cert_identity_status;
12 session.cert_chain_status = outgoing.cert_chain_status; 13 session.cert_chain_status = outgoing.cert_chain_status;
13 return true; 14 return true;
14 end 15 end
15 end, 1000); 16 end, 1000);