mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-03 21:27:38 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

mod_c2s,mod_s2s: Adapt to XEP-xxxx: Stream Limits Advertisement

Browse source 
Thanks MattJ
This commit is contained in:
Kim Alvefur 2022-10-20 14:04:56 +02:00
parent d4f4f76c3c
commit a46ae8cb89
6 changed files with 29 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

10
plugins/mod_s2s_auth_certs.lua
View file

@ -12,6 +12,8 @@ module:hook("s2s-check-certificate", function(event)
local conn = session.conn;
local log = session.log or log;
local secure_hostname = conn.extra and conn.extra.dane_hostname;
if not cert then
log("warn", "No certificate provided by %s", host or "unknown host");
return;
@ -37,6 +39,14 @@ module:hook("s2s-check-certificate", function(event)
-- We'll go ahead and verify the asserted identity if the
-- connecting server specified one.
if secure_hostname then
if cert_verify_identity(secure_hostname, "xmpp-server", cert) then
module:log("info", "Secure SRV name delegation %q -> %q", secure_hostname, host);
session.cert_identity_status = "valid"
else
session.cert_identity_status = "invalid"
end
end
if host then
if cert_verify_identity(host, "xmpp-server", cert) then
session.cert_identity_status = "valid"