diff options
| author |  Sadie Powell | 2021-12-28 14:59:45 +0000 |
|---|---|---|
| committer | Sadie Powell | 2023-06-11 13:52:42 +0100 |
| commit | 75fbb10068a251f8cbe4b4726d84a8b21a2fbb4b (patch) | |
| tree | 1614cf61c6837951d73e732176ba1a36b5da7629 /src/modules/m_sslinfo.cpp | |
| parent | Log the number of object added to the cull list from a destructor. (diff) | |
Implement support for SPKI fingerprints into the sslinfo module.
Diffstat (limited to 'src/modules/m_sslinfo.cpp')
| -rw-r--r-- | src/modules/m_sslinfo.cpp | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/modules/m_sslinfo.cpp b/src/modules/m_sslinfo.cpp index 6cf1e1434..6ea50a564 100644 --- a/src/modules/m_sslinfo.cpp +++ b/src/modules/m_sslinfo.cpp @@ -301,6 +301,7 @@ class ModuleSSLInfo final private: CommandSSLInfo cmd; std::string hash; + bool spkifp; unsigned long warnexpiring; static bool MatchFP(ssl_cert* const cert, const std::string& fp) @@ -324,6 +325,7 @@ public: cmd.operonlyfp = tag->getBool("operonly"); cmd.sslapi.localsecure = tag->getBool("localsecure", true); hash = tag->getString("hash"); + spkifp = tag->getBool("spkifp"); warnexpiring = tag->getDuration("warnexpiring", 0, 0, 60*60*24*365); } @@ -468,7 +470,7 @@ public: auto* cert = new ssl_cert(); if (!hash.empty()) { - iter = flags->find("certfp-" + hash); + iter = flags->find(spkifp ? "spkifp-" : "certfp-" + hash); if (iter != flags->end() && !iter->second.empty()) { // If the gateway specifies this flag we put all trust onto them |