mirrors/ngircd
1
0
Fork 0
mirror of https://github.com/osmarks/ngircd.git synced 2024-10-27 20:36:18 +00:00
Code Issues Releases Wiki Activity

S2S-TLS/GnuTLS: Fix handling of connections without peer certificates

Browse Source
This commit is contained in:
Alexander Barton 2024-01-06 19:57:50 +01:00
parent 180e2ec135
commit 8cef3ce42c
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/ngircd/conn-ssl.c
View File

@ -1000,16 +1000,15 @@ ConnSSL_LogCertInfo( CONNECTION * c, bool connect)
gnutls_mac_get_name(gnutls_mac_get(sess)));
cred = gnutls_auth_get_type(c->ssl_state.gnutls_session);
if (cred == GNUTLS_CRD_CERTIFICATE) {
cert_seen = true;
gnutls_x509_crt_t cert;
unsigned cert_list_size;
const gnutls_datum_t *cert_list =
gnutls_certificate_get_peers(sess, &cert_list_size);
if (!cert_list || cert_list_size == 0) {
Log(LOG_ERR, "No certificates found");
if (!cert_list || cert_list_size == 0)
goto done_cn_validation;
}
cert_seen = true;
int err = gnutls_x509_crt_init(&cert);
if (err < 0) {
Log(LOG_ERR,