aboutsummaryrefslogtreecommitdiffstats
path: root/plugins/mod_s2s
diff options
context:
space:
mode:
authorMatthew Wild <mwild1@gmail.com>2013-04-01 14:45:59 +0100
committerMatthew Wild <mwild1@gmail.com>2013-04-01 14:45:59 +0100
commit25bb94216d34a30f9e5c66d2ac9a9c1147bcd247 (patch)
tree6920771be0a0d45872acec5e8c2d8ffba142174c /plugins/mod_s2s
parent393606f026d5a896e8e36794dd4f4367d56ffad5 (diff)
downloadprosody-25bb94216d34a30f9e5c66d2ac9a9c1147bcd247.tar.gz
prosody-25bb94216d34a30f9e5c66d2ac9a9c1147bcd247.zip
mod_s2s: Close incoming s2s with stream error when secure and we don't trust their certificate
Diffstat (limited to 'plugins/mod_s2s')
-rw-r--r--plugins/mod_s2s/mod_s2s.lua6
1 files changed, 5 insertions, 1 deletions
diff --git a/plugins/mod_s2s/mod_s2s.lua b/plugins/mod_s2s/mod_s2s.lua
index 6893d184..639f464b 100644
--- a/plugins/mod_s2s/mod_s2s.lua
+++ b/plugins/mod_s2s/mod_s2s.lua
@@ -632,7 +632,11 @@ function check_auth_policy(event)
if must_secure and not session.cert_identity_status then
module:log("warn", "Forbidding insecure connection to/from %s", host);
- session:close(false);
+ if session.direction == "incoming" then
+ session:close({ condition = "not-authorized", text = "Your server's certificate is invalid, expired, or not trusted by"..session.to_host });
+ else -- Close outgoing connections without warning
+ session:close(false);
+ end
return false;
end
end