MirrorHub/construct
0
0
Fork 0
mirror of https://github.com/matrix-construct/construct synced 2024-06-25 05:18:23 +02:00
Code Issues Releases Wiki Activity

ircd::net: Add open() option to allow expired certificates.

Browse source
This commit is contained in:
Jason Volk 2018-02-10 18:36:23 -08:00
parent 9ddf83c73c
commit 0dc8593b9c
2 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
include/ircd/net/open.h
View file

@ -92,6 +92,9 @@ struct ircd::net::open_opts
/// Option to toggle whether to allow self-signed certificate authorities
/// in the chain. This is what corporate network nanny's may use to spy.
bool allow_self_chain { false };
/// Option to allow expired certificates.
bool allow_expired { false };
};
/// Constructor intended to provide implicit conversions (no-brackets required)

7
ircd/net.cc
View file

@ -1884,6 +1884,13 @@ noexcept try
reject();
break;
case X509_V_ERR_CERT_HAS_EXPIRED:
if(opts.allow_expired)
return true;
reject();
break;
}
const bool verify_common_name