zydronium/internetee-epp_proxy
1
0
Fork 0
mirror of https://github.com/internetee/epp_proxy.git synced 2025-08-21 14:49:33 +02:00
Code Issues Projects Releases Packages Wiki Activity

tls can be served without client cert

Browse source 
tls can be served if require_client_certs option is set to false in config file
This commit is contained in:
lidakaml 2022-06-07 17:16:07 +03:00 • committed by GitHub
parent 99b714676b
commit 7a6e5aa958
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 21 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

22
apps/epp_proxy/src/epp_tls_worker.erl
View file

@ -169,16 +169,28 @@ log_opened_connection(Ip) ->
"~p.~n",
[ReadableIp, self()]).
require_client_certs() ->
case application:get_env(epp_proxy, require_client_certs) of
{ok, false} -> false;
{ok, true} -> true
end.
%% Extract state info from socket. Fail if you must.
state_from_socket(Socket, State) ->
{ok, PeerCert} = ssl:peercert(Socket),
{ok, {PeerIp, _PeerPort}} = ssl:peername(Socket),
{SSL_CLIENT_S_DN_CN, SSL_CLIENT_CERT} =
epp_certs:headers_from_cert(PeerCert),
Headers = [{"SSL-CLIENT-CERT", SSL_CLIENT_CERT},
{"SSL-CLIENT-S-DN-CN", SSL_CLIENT_S_DN_CN},
PlainHeaders = [
{"User-Agent", <<"EPP proxy">>},
{"X-Forwarded-for", epp_util:readable_ip(PeerIp)}],
case {ssl:peercert(Socket), require_client_certs()} of
{{error, no_peercert}, false} -> Headers = PlainHeaders;
% {{error, no_peercert}, true} -> ; %% TODO: maybe send the reason of connection close
{{ok, PeerCert}, _} ->
{SSL_CLIENT_S_DN_CN, SSL_CLIENT_CERT} =
epp_certs:headers_from_cert(PeerCert),
Headers = lists:append(PlainHeaders, [
{"SSL-CLIENT-CERT", SSL_CLIENT_CERT},
{"SSL-CLIENT-S-DN-CN", SSL_CLIENT_S_DN_CN}])
end,
NewState = State#state{socket = Socket,
headers = Headers},
lager:info("Established connection with: [~p]~n",