rsyslog/rsyslog
1
0
Fork 0
mirror of https://github.com/rsyslog/rsyslog.git synced 2025-12-19 20:50:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

checking if client provided a cert and complain if not

Browse Source
This commit is contained in:
Rainer Gerhards 2008-05-23 11:39:37 +02:00
parent b4baf2bda0
commit 3b5c252784
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
runtime/nsd_gtls.c
View File

@ -638,7 +638,9 @@ gtlsChkPeerCertValidity(nsd_gtls_t *pThis)
ISOBJ_TYPE_assert(pThis, nsd_gtls);
gnuRet = gnutls_certificate_verify_peers(pThis->sess);
if(gnuRet < 1)
if(gnuRet == GNUTLS_E_NO_CERTIFICATE_FOUND) {
errmsg.LogError(NO_ERRCODE, "peer did not provide a certificate, not permitted to talk to it");
} else if(gnuRet < 1)
CHKgnutls(gnuRet);
if(gnuRet & GNUTLS_CERT_INVALID) {