conf: require certificate fingerprint for SSL connections
This commit is contained in:
parent
dc986b5468
commit
f61d096186
1 changed files with 7 additions and 0 deletions
|
@ -1305,6 +1305,13 @@ conf_end_connect(struct TopConf *tc)
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
if((yy_server->flags & SERVER_SSL) && EmptyString(yy_server->certfp))
|
||||||
|
{
|
||||||
|
conf_report_error("Ignoring connect block for %s -- no fingerprint provided for SSL connection.",
|
||||||
|
yy_server->name);
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
if(EmptyString(yy_server->connect_host)
|
if(EmptyString(yy_server->connect_host)
|
||||||
&& GET_SS_FAMILY(&yy_server->connect4) != AF_INET
|
&& GET_SS_FAMILY(&yy_server->connect4) != AF_INET
|
||||||
#ifdef RB_IPV6
|
#ifdef RB_IPV6
|
||||||
|
|
Loading…
Reference in a new issue