# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1631297719 -7200
# Node ID c9397cd5cfe668af192fff61de4db31fc69165a8
# Parent  1b701f208b1b772e3acdc24a7cceba49b37d686c
mod_s2s_auth_samecert: Handle lack of provided client certificate

diff -r 1b701f208b1b -r c9397cd5cfe6 mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua
--- a/mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua	Thu Sep 09 20:27:14 2021 +0200
+++ b/mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua	Fri Sep 10 20:15:19 2021 +0200
@@ -4,8 +4,8 @@
 
 module:hook("s2s-check-certificate", function(event)
 	local session, cert = event.session, event.cert;
-	if session.direction ~= "incoming" then return end
-	
+	if not cert or session.direction ~= "incoming" then return end
+
 	local outgoing = hosts[session.to_host].s2sout[session.from_host];
 	if outgoing and outgoing.type == "s2sout" and outgoing.secure and outgoing.conn:socket():getpeercertificate():pem() == cert:pem() then
 		session.log("debug", "Certificate matches that of s2sout%s", tostring(outgoing):match("[a-f0-9]+$"));