conf: require certificate fingerprint for SSL connections
This commit is contained in:
parent
dc986b5468
commit
f61d096186
1 changed files with 7 additions and 0 deletions
|
@ -1305,6 +1305,13 @@ conf_end_connect(struct TopConf *tc)
|
|||
return 0;
|
||||
}
|
||||
|
||||
if((yy_server->flags & SERVER_SSL) && EmptyString(yy_server->certfp))
|
||||
{
|
||||
conf_report_error("Ignoring connect block for %s -- no fingerprint provided for SSL connection.",
|
||||
yy_server->name);
|
||||
return 0;
|
||||
}
|
||||
|
||||
if(EmptyString(yy_server->connect_host)
|
||||
&& GET_SS_FAMILY(&yy_server->connect4) != AF_INET
|
||||
#ifdef RB_IPV6
|
||||
|
|
Loading…
Reference in a new issue