vulpineawoo/solanum
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

ircd: Don't try to connect to servers that we know have an invalid fingerprint

Browse source 
This just causes an unnecessary link/squit on the other server.
This commit is contained in:
Simon Arlott 2016-04-24 11:49:21 +01:00
parent 4fbb736202
commit 65f43a4fc4
No known key found for this signature in database
GPG key ID: C8975F2043CA5D24
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
ircd/s_serv.c
View file

@ -1257,6 +1257,18 @@ serv_connect_callback(rb_fde_t *F, int status, void *data)
return; return;
} }
if(server_p->certfp && (!client_p->certfp || rb_strcasecmp(server_p->certfp, client_p->certfp) != 0))
{
sendto_realops_snomask(SNO_GENERAL, is_remote_connect(client_p) ? L_NETWIDE : L_ALL,
"Connection to %s has invalid certificate fingerprint %s",
client_p->name, client_p->certfp);
ilog(L_SERVER, "Access denied, invalid certificate fingerprint %s from %s",
client_p->certfp, log_client_name(client_p, SHOW_IP));
exit_client(client_p, client_p, &me, "Invalid fingerprint.");
return;
}
/* Next, send the initial handshake */ /* Next, send the initial handshake */
SetHandshake(client_p); SetHandshake(client_p);