zydronium/getnamingo-registry
1
0
Fork 0
mirror of https://github.com/getnamingo/registry.git synced 2025-05-28 16:29:55 +02:00
Code Issues Projects Releases Packages Wiki Activity

Update start_epp.php

Browse source
This commit is contained in:
Pinga 2025-05-02 22:27:16 +03:00
parent b2ba26d8b8
commit dfb165fb63
1 changed files with 1 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

10
epp/start_epp.php
View file

@ -106,7 +106,7 @@ $server->set([
'ssl_client_cert_file' => '/etc/ssl/certs/ca-certificates.crt',
'ssl_allow_self_signed' => false,
'ssl_protocols' => SWOOLE_SSL_TLSv1_2 | SWOOLE_SSL_TLSv1_3,
'ssl_ciphers' => 'TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK:!CBC',
'ssl_ciphers' => 'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE+AESGCM:ECDHE+AES256:ECDHE+AES128:DHE+AES256:DHE+AES128:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK',
]);
$rateLimiter = new Rately();
@ -115,14 +115,6 @@ $log->info('Namingo EPP server started');
$server->handle(function (Connection $conn) use ($table, $eppExtensionsTable, $pool, $c, $log, $permittedIPsTable, $rateLimiter) {
// Get the client information
$clientInfo = $conn->exportSocket()->getpeername();
$certInfo = $conn->exportSocket()->getPeerCert();
if (!$certInfo) {
$log->warning("Client at $clientIP did not provide a valid certificate.");
$conn->close();
return;
}
$clientIP = isset($clientInfo['address']) ? (strpos($clientInfo['address'], '::ffff:') === 0 ? substr($clientInfo['address'], 7) : $clientInfo['address']) : '';
if (isIPv6($clientIP)) {
$clientIP = expandIPv6($clientIP);