aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKim Alvefur <zash@zash.se>2019-09-07 00:00:40 +0200
committerKim Alvefur <zash@zash.se>2019-09-07 00:00:40 +0200
commit5bba716be9cf3b7e345164023dc89b84e7542ea1 (patch)
treea5db0cd02384ce4b3b866a2ef6a5e6dab2149064
parent92b963270a4e399096f66ac9353a99574915d2e7 (diff)
downloadprosody-5bba716be9cf3b7e345164023dc89b84e7542ea1.tar.gz
prosody-5bba716be9cf3b7e345164023dc89b84e7542ea1.zip
core.certmanager: Lower severity for tls config not having cert
This is needed for SNI where certificates are in separate per-hostname contexts, not the main one. If there is a cert, it will still require a corresponding key.
-rw-r--r--core/certmanager.lua6
1 files changed, 4 insertions, 2 deletions
diff --git a/core/certmanager.lua b/core/certmanager.lua
index 64528c34..b20a0cdb 100644
--- a/core/certmanager.lua
+++ b/core/certmanager.lua
@@ -169,8 +169,10 @@ local function create_context(host, mode, ...)
local user_ssl_config = cfg:final();
if mode == "server" then
- if not user_ssl_config.certificate then return nil, "No certificate present in SSL/TLS configuration for "..host; end
- if not user_ssl_config.key then return nil, "No key present in SSL/TLS configuration for "..host; end
+ if not user_ssl_config.certificate then
+ log("info", "No certificate present in SSL/TLS configuration for %s. SNI will be required.", host);
+ end
+ if user_ssl_config.certificate and not user_ssl_config.key then return nil, "No key present in SSL/TLS configuration for "..host; end
end
for option in pairs(path_options) do