diff options
| author |  Sadie Powell | 2025-10-26 15:12:17 +0000 |
|---|---|---|
| committer | Sadie Powell | 2025-10-26 15:18:49 +0000 |
| commit | d424d2ef710b4f45c06bfad79089bd998d5a35f9 (patch) | |
| tree | 34197b740e7fa0912dc50e50efb15a80eb22c1f3 /src/modules/m_sslinfo.cpp | |
| parent | Deprecate the contents of the SSLClientCert namespace. (diff) | |
Fix allowing expired client certificates in some cases.
This fixes a regression from v3.
Diffstat (limited to 'src/modules/m_sslinfo.cpp')
| -rw-r--r-- | src/modules/m_sslinfo.cpp | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/modules/m_sslinfo.cpp b/src/modules/m_sslinfo.cpp index 4a1f73f74..bebd08155 100644 --- a/src/modules/m_sslinfo.cpp +++ b/src/modules/m_sslinfo.cpp @@ -373,7 +373,7 @@ public: whois.SendLine(RPL_WHOISSECURE, "is using a secure connection"); ssl_cert* cert = cmd.sslapi.GetCertificate(whois.GetTarget()); - if (cert) + if (!cert || !cert->IsUsable()) { if (!cmd.operonlyfp || whois.IsSelfWhois() || whois.GetSource()->IsOper()) { @@ -415,7 +415,7 @@ public: } const std::string fingerprint = oper->GetConfig()->getString("fingerprint"); - if (!fingerprint.empty() && (!cert || !MatchFingerprint(cert, fingerprint))) + if (!fingerprint.empty() && (!cert || !cert->IsUsable() || !MatchFingerprint(cert, fingerprint))) { if (!automatic) { |