mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-05 06:07:37 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

mod_s2s: Close incoming s2s with stream error when secure and we don't trust their certificate

Browse source
This commit is contained in:
Matthew Wild 2013-04-01 14:45:59 +01:00
parent 393606f026
commit 25bb94216d
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
plugins/mod_s2s/mod_s2s.lua
View file

@ -632,7 +632,11 @@ function check_auth_policy(event)
if must_secure and not session.cert_identity_status then
module:log("warn", "Forbidding insecure connection to/from %s", host);
session:close(false);
if session.direction == "incoming" then
session:close({ condition = "not-authorized", text = "Your server's certificate is invalid, expired, or not trusted by"..session.to_host });
else -- Close outgoing connections without warning
session:close(false);
end
return false;
end
end