e2m/dispatch
4
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Set InsecureSkipVerify correctly when theres no client cert, rename verify_client_certificates to verify_certificates

Browse source
This commit is contained in:
Ken-Håvard Lieng 2017-06-30 07:20:38 +02:00
parent f1e44661b8
commit 786d8013b9
3 changed files with 14 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

9
server/websocket_handler.go
View file

@ -111,10 +111,13 @@ func (h *wsHandler) connect(b []byte) {
i.Password = data.Password
}
if cert := h.session.user.GetCertificate(); cert != nil {
if i.TLS {
i.TLSConfig = &tls.Config{
Certificates: []tls.Certificate{*cert},
InsecureSkipVerify: !viper.GetBool("verify_client_certificates"),
InsecureSkipVerify: !viper.GetBool("verify_certificates"),
}
if cert := h.session.user.GetCertificate(); cert != nil {
i.TLSConfig.Certificates = []tls.Certificate{*cert}
}
}