Software / code / prosody
Diff
core/certmanager.lua @ 10237:a36af4570b39
core.certmanager: Lower severity for tls config not having cert
This is needed for SNI where certificates are in separate
per-hostname contexts, not the main one.
If there is a cert, it will still require a corresponding key.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Sat, 07 Sep 2019 00:00:40 +0200 |
| parent | 10227:eeb711b92da5 |
| child | 10463:fbeb7a3fc4eb |
line wrap: on
line diff
--- a/core/certmanager.lua Sun Sep 01 02:05:33 2019 +0200 +++ b/core/certmanager.lua Sat Sep 07 00:00:40 2019 +0200 @@ -169,8 +169,10 @@ local user_ssl_config = cfg:final(); if mode == "server" then - if not user_ssl_config.certificate then return nil, "No certificate present in SSL/TLS configuration for "..host; end - if not user_ssl_config.key then return nil, "No key present in SSL/TLS configuration for "..host; end + if not user_ssl_config.certificate then + log("info", "No certificate present in SSL/TLS configuration for %s. SNI will be required.", host); + end + if user_ssl_config.certificate and not user_ssl_config.key then return nil, "No key present in SSL/TLS configuration for "..host; end end for option in pairs(path_options) do
