Diff

plugins/mod_s2s_auth_certs.lua @ 12812:b2d422b88cd6

Revert unintentionally committed parts of 12bd40b8e105
author Kim Alvefur <zash@zash.se>
date Wed, 21 Dec 2022 21:34:07 +0100
parent 12808:12bd40b8e105
child 12816:02f8b10d73e8
line wrap: on
line diff
--- a/plugins/mod_s2s_auth_certs.lua	Wed Nov 09 19:10:16 2022 +0100
+++ b/plugins/mod_s2s_auth_certs.lua	Wed Dec 21 21:34:07 2022 +0100
@@ -12,8 +12,6 @@
 	local conn = session.conn;
 	local log = session.log or log;
 
-	local secure_hostname = conn.extra and conn.extra.dane_hostname;
-
 	if not cert then
 		log("warn", "No certificate provided by %s", host or "unknown host");
 		return;
@@ -39,14 +37,6 @@
 
 		-- We'll go ahead and verify the asserted identity if the
 		-- connecting server specified one.
-		if secure_hostname then
-			if cert_verify_identity(secure_hostname, "xmpp-server", cert) then
-				module:log("info", "Secure SRV name delegation %q -> %q", secure_hostname, host);
-				session.cert_identity_status = "valid"
-			else
-				session.cert_identity_status = "invalid"
-			end
-		end
 		if host then
 			if cert_verify_identity(host, "xmpp-server", cert) then
 				session.cert_identity_status = "valid"