prosody
ecc039288edc
prosodyctl

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Comparison

prosodyctl @ 6637:ecc039288edc

prosodyctl: check certs: Correctly check that certificates are valid for s2s
author Kim Alvefur <zash@zash.se>
date Mon, 27 Apr 2015 21:52:16 +0200
parent 6612:6cc48b51d699
child 6711:76683a3f3d75
comparison
equal deleted inserted replaced
6635:ef88a6072228 6637:ecc039288edc
1144 print(" Not vaild for client connections to "..host..".") 1144 print(" Not vaild for client connections to "..host..".")
1145 cert_ok = false 1145 cert_ok = false
1146 end 1146 end
1147 if (not (config.get(host, "anonymous_login") 1147 if (not (config.get(host, "anonymous_login")
1148 or config.get(host, "authentication") == "anonymous")) 1148 or config.get(host, "authentication") == "anonymous"))
1149 and not x509_verify_identity(host, "_xmpp-client", cert) then 1149 and not x509_verify_identity(host, "_xmpp-server", cert) then
1150 print(" Not vaild for server-to-server connections to "..host..".") 1150 print(" Not vaild for server-to-server connections to "..host..".")
1151 cert_ok = false 1151 cert_ok = false
1152 end 1152 end
1153 end 1153 end
1154 end 1154 end