mirrors/ngircd
1
0
Fork 0
mirror of https://github.com/osmarks/ngircd.git synced 2025-07-05 03:12:50 +00:00
Code Issues Releases Wiki Activity

S2S-TLS/GnuTLS: Fix handling of connections without peer certificates

Browse Source
This commit is contained in:
Alexander Barton 2024-01-06 19:57:50 +01:00
parent 180e2ec135
commit 8cef3ce42c
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/ngircd/conn-ssl.c
View File

@ -1000,16 +1000,15 @@ ConnSSL_LogCertInfo( CONNECTION * c, bool connect)
gnutls_mac_get_name(gnutls_mac_get(sess))); gnutls_mac_get_name(gnutls_mac_get(sess)));
cred = gnutls_auth_get_type(c->ssl_state.gnutls_session); cred = gnutls_auth_get_type(c->ssl_state.gnutls_session);
if (cred == GNUTLS_CRD_CERTIFICATE) { if (cred == GNUTLS_CRD_CERTIFICATE) {
cert_seen = true;
gnutls_x509_crt_t cert; gnutls_x509_crt_t cert;
unsigned cert_list_size; unsigned cert_list_size;
const gnutls_datum_t *cert_list = const gnutls_datum_t *cert_list =
gnutls_certificate_get_peers(sess, &cert_list_size); gnutls_certificate_get_peers(sess, &cert_list_size);
if (!cert_list || cert_list_size == 0) {
Log(LOG_ERR, "No certificates found"); if (!cert_list || cert_list_size == 0)
goto done_cn_validation; goto done_cn_validation;
}
cert_seen = true;
int err = gnutls_x509_crt_init(&cert); int err = gnutls_x509_crt_init(&cert);
if (err < 0) { if (err < 0) {
Log(LOG_ERR, Log(LOG_ERR,