interesting
/
getdns
mirror of https://github.com/getdnsapi/getdns.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Fix reporting authentication failure

This commit is contained in:
Willem Toorop 2020-03-02 15:51:46 +00:00
parent e17ed3938c
commit af46e20721
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/gnutls/tls.c
View File

@ -712,8 +712,11 @@ failsafe:
GETDNS_FREE(*conn->mfs, new_cert_list); GETDNS_FREE(*conn->mfs, new_cert_list);
} }
if (ret != DANE_E_SUCCESS) if (ret != DANE_E_SUCCESS) {
*errnum = ret;
*errmsg = dane_strerror(ret);
return GETDNS_RETURN_GENERIC_ERROR; return GETDNS_RETURN_GENERIC_ERROR;
}
if (verify != 0) { if (verify != 0) {
if (verify & DANE_VERIFY_CERT_DIFFERS) { if (verify & DANE_VERIFY_CERT_DIFFERS) {

4
src/stub.c
View File

@ -1035,8 +1035,8 @@ tls_do_handshake(getdns_upstream *upstream)
: "*Failure*" )); : "*Failure*" ));
upstream->tls_auth_state = GETDNS_AUTH_FAILED; upstream->tls_auth_state = GETDNS_AUTH_FAILED;
} else { } else {
long verify_errno; long verify_errno = 0;
const char* verify_errmsg; const char* verify_errmsg = "Unknown verify error (fix reporting!)";
if (_getdns_tls_connection_certificate_verify(upstream->tls_obj, &verify_errno, &verify_errmsg)) { if (_getdns_tls_connection_certificate_verify(upstream->tls_obj, &verify_errno, &verify_errmsg)) {
upstream->tls_auth_state = GETDNS_AUTH_FAILED; upstream->tls_auth_state = GETDNS_AUTH_FAILED;