Software / code / prosody
Comparison
plugins/mod_dialback.lua @ 11557:6be890ca492e 0.11
mod_dialback: Use correct host for certificate check (fixes #1381)
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Sun, 23 Jun 2019 16:16:26 +0200 |
| parent | 11556:6f56170ea986 |
| child | 11558:d0e9ffccdef9 |
comparison
equal
deleted
inserted
replaced
| 11556:6f56170ea986 | 11557:6be890ca492e |
|---|---|
| 23 | 23 |
| 24 local dialback_secret = sha256_hash(module:get_option_string("dialback_secret", uuid_gen()), true); | 24 local dialback_secret = sha256_hash(module:get_option_string("dialback_secret", uuid_gen()), true); |
| 25 local dwd = module:get_option_boolean("dialback_without_dialback", false); | 25 local dwd = module:get_option_boolean("dialback_without_dialback", false); |
| 26 | 26 |
| 27 --- Helper to check that a session peer's certificate is valid | 27 --- Helper to check that a session peer's certificate is valid |
| 28 function check_cert_status(session) | 28 function check_cert_status(session, host) |
| 29 local host = session.direction == "outgoing" and session.to_host or session.from_host | |
| 30 local conn = session.conn:socket() | 29 local conn = session.conn:socket() |
| 31 local cert | 30 local cert |
| 32 if conn.getpeercertificate then | 31 if conn.getpeercertificate then |
| 33 cert = conn:getpeercertificate() | 32 cert = conn:getpeercertificate() |
| 34 end | 33 end |