conf: require certificate fingerprint for SSL connections

This commit is contained in:
Simon Arlott 2016-04-25 20:19:48 +01:00
parent dc986b5468
commit f61d096186
No known key found for this signature in database
GPG key ID: C8975F2043CA5D24

View file

@ -1305,6 +1305,13 @@ conf_end_connect(struct TopConf *tc)
return 0;
}
if((yy_server->flags & SERVER_SSL) && EmptyString(yy_server->certfp))
{
conf_report_error("Ignoring connect block for %s -- no fingerprint provided for SSL connection.",
yy_server->name);
return 0;
}
if(EmptyString(yy_server->connect_host)
&& GET_SS_FAMILY(&yy_server->connect4) != AF_INET
#ifdef RB_IPV6