backup/barrier
1
0
Fork 0
mirror of https://github.com/debauchee/barrier.git synced 2026-05-05 12:10:57 +08:00
Code Issues Projects Releases Wiki Activity

lib/net: Present client certificate when connecting to server

Browse Source
This commit is contained in:
Povilas Kanapickas
2021-11-01 04:50:07 +02:00
parent 92ba6f61e6
commit 4d73ed9fdd
2 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
doc/newsfragments/client-send-certificate.feature Normal file
View File

@@ -0,0 +1 @@
Barrier client now sends certificate that the server can verify.

8
src/lib/net/SecureSocket.cpp
View File

@@ -462,9 +462,13 @@ SecureSocket::secureAccept(int socket)
int
SecureSocket::secureConnect(int socket)
{
createSSL();
if (!load_certificates(barrier::DataDirectories::ssl_certificate_path())) {
LOG((CLOG_ERR "could not load client certificates"));
// FIXME: this is fatal error, but we current don't disconnect because whole logic in this
// function needs to be cleaned up
}
load_certificates(barrier::DataDirectories::ssl_certificate_path());
createSSL();
// attach the socket descriptor
SSL_set_fd(m_ssl->m_ssl, socket);