mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-04 13:47:41 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

prosodyctl: check certs: Use certmanager to get the final ssl config in order to support the new certificate(s) config option

Browse source
This commit is contained in:
Kim Alvefur 2016-02-28 18:22:23 +01:00
parent 29cb6ece54
commit 32f24c84a1
1 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

14
prosodyctl
View file

@ -1197,6 +1197,7 @@ function commands.check(arg)
local cert_ok; local cert_ok;
print"Checking certificates..." print"Checking certificates..."
local x509_verify_identity = require"util.x509".verify_identity; local x509_verify_identity = require"util.x509".verify_identity;
local create_context = require "core.certmanager".create_context;
local ssl = dependencies.softreq"ssl"; local ssl = dependencies.softreq"ssl";
-- local datetime_parse = require"util.datetime".parse_x509; -- local datetime_parse = require"util.datetime".parse_x509;
local load_cert = ssl and ssl.loadcertificate; local load_cert = ssl and ssl.loadcertificate;
@ -1211,13 +1212,12 @@ function commands.check(arg)
for host in enabled_hosts() do for host in enabled_hosts() do
print("Checking certificate for "..host); print("Checking certificate for "..host);
-- First, let's find out what certificate this host uses. -- First, let's find out what certificate this host uses.
local ssl_config = config.rawget(host, "ssl"); local host_ssl_config = config.rawget(host, "ssl")
if not ssl_config then or config.rawget(host:match("%.(.*)"), "ssl");
local base_host = host:match("%.(.*)"); local global_ssl_config = config.rawget("*", "ssl");
ssl_config = config.get(base_host, "ssl"); local ok, err, ssl_config = create_context(host, "server", host_ssl_config, global_ssl_config);
end if not ok then
if not ssl_config then print(" Error: "..err);
print(" No 'ssl' option defined for "..host)
cert_ok = false cert_ok = false
elseif not ssl_config.certificate then elseif not ssl_config.certificate then
print(" No 'certificate' set in ssl option for "..host) print(" No 'certificate' set in ssl option for "..host)