mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-01 20:27:39 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

mod_s2s_auth_certs: Handle potential string error

Browse source 
conn:ssl_peerverification() can now return a single error in case the
connection has been closed for whatever reason
This commit is contained in:
Kim Alvefur 2024-02-21 21:29:16 +01:00
parent 5764e73a65
commit c0a3026414
1 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

9
plugins/mod_s2s_auth_certs.lua
View file

@ -1,7 +1,6 @@
module:set_global();
local cert_verify_identity = require "prosody.util.x509".verify_identity;
local NULL = {};
local log = module._log;
local measure_cert_statuses = module:metric("counter", "checked", "", "Certificate validation results",
@ -23,8 +22,12 @@ module:hook("s2s-check-certificate", function(event)
-- Is there any interest in printing out all/the number of errors here?
if not chain_valid then
log("debug", "certificate chain validation result: invalid");
for depth, t in pairs(errors or NULL) do
log("debug", "certificate error(s) at depth %d: %s", depth-1, table.concat(t, ", "))
if type(errors) == "table" then
for depth, t in pairs(errors) do
log("debug", "certificate error(s) at depth %d: %s", depth-1, table.concat(t, ", "));
end
else
log("debug", "certificate error: %s", errors);
end
session.cert_chain_status = "invalid";
session.cert_chain_errors = errors;