diff options
| author | Kim Alvefur <zash@zash.se> | 2019-11-30 23:29:15 +0100 |
|---|---|---|
| committer | Kim Alvefur <zash@zash.se> | 2019-11-30 23:29:15 +0100 |
| commit | 64944464564d65cc215cac3d234a9458414826a9 (patch) | |
| tree | 19a9e8b48fbe9532d1aff8ed4aaa7a414d92906a | |
| parent | 07645554cc8c98328ae4cae5cc2490197c6ce3f0 (diff) | |
| download | prosody-64944464564d65cc215cac3d234a9458414826a9.tar.gz prosody-64944464564d65cc215cac3d234a9458414826a9.zip | |
mod_s2s: Improve log message about forbidding insecure connections
This new wording generator is nice.
| -rw-r--r-- | plugins/mod_s2s/mod_s2s.lua | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/plugins/mod_s2s/mod_s2s.lua b/plugins/mod_s2s/mod_s2s.lua index 7f6546e9..7700db85 100644 --- a/plugins/mod_s2s/mod_s2s.lua +++ b/plugins/mod_s2s/mod_s2s.lua @@ -763,8 +763,8 @@ function check_auth_policy(event) end if must_secure and (session.cert_chain_status ~= "valid" or session.cert_identity_status ~= "valid") then - module:log("warn", "Forbidding insecure connection to/from %s", host or session.ip or "(unknown host)"); local reason = friendly_cert_error(session); + module:log("warn", "Forbidding insecure connection to/from %s because its certificate %s", host or session.ip or "(unknown host)", reason); -- XEP-0178 recommends closing outgoing connections without warning -- but does not give a rationale for this. -- In practice most cases are configuration mistakes or forgotten |