Software /
code /
prosody-modules
Comparison
mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua @ 2234:3024116d6093
mod_s2s_auth_samecert: Log which s2sout has a matching cert
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Fri, 08 Jul 2016 22:37:48 +0200 |
parent | 2204:affccf479f89 |
child | 4675:c9397cd5cfe6 |
comparison
equal
deleted
inserted
replaced
2233:dd806ebeb2fc | 2234:3024116d6093 |
---|---|
6 local session, cert = event.session, event.cert; | 6 local session, cert = event.session, event.cert; |
7 if session.direction ~= "incoming" then return end | 7 if session.direction ~= "incoming" then return end |
8 | 8 |
9 local outgoing = hosts[session.to_host].s2sout[session.from_host]; | 9 local outgoing = hosts[session.to_host].s2sout[session.from_host]; |
10 if outgoing and outgoing.type == "s2sout" and outgoing.secure and outgoing.conn:socket():getpeercertificate():pem() == cert:pem() then | 10 if outgoing and outgoing.type == "s2sout" and outgoing.secure and outgoing.conn:socket():getpeercertificate():pem() == cert:pem() then |
11 session.log("debug", "Certificate matches that of s2sout%s", tostring(outgoing):match("[a-f0-9]+$")); | |
11 session.cert_identity_status = outgoing.cert_identity_status; | 12 session.cert_identity_status = outgoing.cert_identity_status; |
12 session.cert_chain_status = outgoing.cert_chain_status; | 13 session.cert_chain_status = outgoing.cert_chain_status; |
13 return true; | 14 return true; |
14 end | 15 end |
15 end, 1000); | 16 end, 1000); |