mirror of
https://github.com/bjc/prosody.git
synced 2025-04-01 20:27:39 +03:00
mod_dialback: Remove d-w-d feature
Backs out 1d0862814bfc and 2fdd71b08126 Largely unused, undocumented and did not have enough tests to provide confidence in its correct operation.
This commit is contained in:
parent
1cd5049c77
commit
c2ce30433a
2 changed files with 1 additions and 23 deletions
|
@ -22,19 +22,6 @@ local xmlns_stream = "http://etherx.jabber.org/streams";
|
|||
local dialback_requests = setmetatable({}, { __mode = 'v' });
|
||||
|
||||
local dialback_secret = sha256_hash(module:get_option_string("dialback_secret", uuid_gen()), true);
|
||||
local dwd = module:get_option_boolean("dialback_without_dialback", false);
|
||||
|
||||
--- Helper to check that a session peer's certificate is valid
|
||||
function check_cert_status(session, host)
|
||||
local conn = session.conn:socket()
|
||||
local cert
|
||||
if conn.getpeercertificate then
|
||||
cert = conn:getpeercertificate()
|
||||
end
|
||||
|
||||
return module:fire_event("s2s-check-certificate", { host = host, session = session, cert = cert });
|
||||
end
|
||||
|
||||
|
||||
function module.save()
|
||||
return { dialback_secret = dialback_secret };
|
||||
|
@ -104,15 +91,6 @@ module:hook("stanza/jabber:server:dialback:result", function(event)
|
|||
origin:close("improper-addressing");
|
||||
end
|
||||
|
||||
if dwd and origin.secure then
|
||||
if check_cert_status(origin, from) == false then
|
||||
return
|
||||
elseif origin.cert_chain_status == "valid" and origin.cert_identity_status == "valid" then
|
||||
origin.sends2s(st.stanza("db:result", { to = from, from = to, id = attr.id, type = "valid" }));
|
||||
module:fire_event("s2s-authenticated", { session = origin, host = from });
|
||||
return true;
|
||||
end
|
||||
end
|
||||
|
||||
origin.hosts[from] = { dialback_key = stanza[1] };
|
||||
|
||||
|
|
|
@ -276,7 +276,7 @@ function make_authenticated(event)
|
|||
end
|
||||
|
||||
--- Helper to check that a session peer's certificate is valid
|
||||
function check_cert_status(session)
|
||||
local function check_cert_status(session)
|
||||
local host = session.direction == "outgoing" and session.to_host or session.from_host
|
||||
local conn = session.conn:socket()
|
||||
local cert
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue