Mercurial > prosody-hg

comparison plugins/mod_s2s_auth_certs.lua @ 10454:6c3fccb75b38

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_s2s_auth_certs: Save chain validation errors for later use
author Kim Alvefur <zash@zash.se>
date Wed, 27 Nov 2019 23:23:25 +0100
parents 77f900bbbf25
children a405884c62f4
comparison
equal deleted inserted replaced
10453:926d6086a95a 10454:6c3fccb75b38
25 log("debug", "certificate chain validation result: invalid"); 25 log("debug", "certificate chain validation result: invalid");
26 for depth, t in pairs(errors or NULL) do 26 for depth, t in pairs(errors or NULL) do
27 log("debug", "certificate error(s) at depth %d: %s", depth-1, table.concat(t, ", ")) 27 log("debug", "certificate error(s) at depth %d: %s", depth-1, table.concat(t, ", "))
28 end 28 end
29 session.cert_chain_status = "invalid"; 29 session.cert_chain_status = "invalid";
30 session.cert_chain_errors = errors;
30 else 31 else
31 log("debug", "certificate chain validation result: valid"); 32 log("debug", "certificate chain validation result: valid");
32 session.cert_chain_status = "valid"; 33 session.cert_chain_status = "valid";
33 34
34 -- We'll go ahead and verify the asserted identity if the 35 -- We'll go ahead and verify the asserted identity if the