Mercurial > prosody-modules

comparison mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua @ 2204:affccf479f89

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_s2s_auth_samecert: Authenticate incoming s2s connection if certificate matches that of an established outgoing s2s connection
author Kim Alvefur <zash@zash.se>
date Thu, 09 Jun 2016 11:46:45 +0200
parents
children 3024116d6093
comparison
equal deleted inserted replaced
2203:2dcc3079572c 2204:affccf479f89
1 module:set_global()
2
3 local hosts = prosody.hosts;
4
5 module:hook("s2s-check-certificate", function(event)
6 local session, cert = event.session, event.cert;
7 if session.direction ~= "incoming" then return end
8
9 local outgoing = hosts[session.to_host].s2sout[session.from_host];
10 if outgoing and outgoing.type == "s2sout" and outgoing.secure and outgoing.conn:socket():getpeercertificate():pem() == cert:pem() then
11 session.cert_identity_status = outgoing.cert_identity_status;
12 session.cert_chain_status = outgoing.cert_chain_status;
13 return true;
14 end
15 end, 1000);