mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-03 21:27:38 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

mod_s2s_auth_certs: Pick a logging function once and stick with it

Browse source
This commit is contained in:
Kim Alvefur 2014-07-25 21:03:16 +02:00
parent bd17040999
commit a960fa32ac
1 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
plugins/mod_s2s_auth_certs.lua
View file

@ -9,6 +9,7 @@ module:hook("s2s-check-certificate", function(event)
local conn = session.conn:socket();
if cert then
local log = session.log or log;
local chain_valid, errors;
if conn.getpeerverification then
chain_valid, errors = conn:getpeerverification();
@ -20,13 +21,13 @@ module:hook("s2s-check-certificate", function(event)
end
-- Is there any interest in printing out all/the number of errors here?
if not chain_valid then
(session.log or log)("debug", "certificate chain validation result: invalid");
log("debug", "certificate chain validation result: invalid");
for depth, t in pairs(errors or NULL) do
(session.log or log)("debug", "certificate error(s) at depth %d: %s", depth-1, table.concat(t, ", "))
log("debug", "certificate error(s) at depth %d: %s", depth-1, table.concat(t, ", "))
end
session.cert_chain_status = "invalid";
else
(session.log or log)("debug", "certificate chain validation result: valid");
log("debug", "certificate chain validation result: valid");
session.cert_chain_status = "valid";
-- We'll go ahead and verify the asserted identity if the
@ -37,7 +38,7 @@ module:hook("s2s-check-certificate", function(event)
else
session.cert_identity_status = "invalid"
end
(session.log or log)("debug", "certificate identity validation result: %s", session.cert_identity_status);
log("debug", "certificate identity validation result: %s", session.cert_identity_status);
end
end
end