mod_s2s_auth_samecert/mod_s2s_auth_samecert.lua
changeset 2238 3024116d6093
parent 2208 affccf479f89
child 4679 c9397cd5cfe6
equal deleted inserted replaced
2237:dd806ebeb2fc 2238:3024116d6093
     6 	local session, cert = event.session, event.cert;
     6 	local session, cert = event.session, event.cert;
     7 	if session.direction ~= "incoming" then return end
     7 	if session.direction ~= "incoming" then return end
     8 	
     8 	
     9 	local outgoing = hosts[session.to_host].s2sout[session.from_host];
     9 	local outgoing = hosts[session.to_host].s2sout[session.from_host];
    10 	if outgoing and outgoing.type == "s2sout" and outgoing.secure and outgoing.conn:socket():getpeercertificate():pem() == cert:pem() then
    10 	if outgoing and outgoing.type == "s2sout" and outgoing.secure and outgoing.conn:socket():getpeercertificate():pem() == cert:pem() then
       
    11 		session.log("debug", "Certificate matches that of s2sout%s", tostring(outgoing):match("[a-f0-9]+$"));
    11 		session.cert_identity_status = outgoing.cert_identity_status;
    12 		session.cert_identity_status = outgoing.cert_identity_status;
    12 		session.cert_chain_status = outgoing.cert_chain_status;
    13 		session.cert_chain_status = outgoing.cert_chain_status;
    13 		return true;
    14 		return true;
    14 	end
    15 	end
    15 end, 1000);
    16 end, 1000);