Merge pull request #84 from ssahani/dev

TLS: Abort connection if failed to validate certificate
systemd · May 13, 2024 · cb336c0 · cb336c0
2 parents 1e538e8 + 00f4721
commit cb336c0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/netlog/netlog-tls.c b/src/netlog/netlog-tls.c
@@ -102,7 +102,8 @@ int ssl_verify_certificate_validity(int s, X509_STORE_CTX *store) {
                                 }}
                                 break;
                         default:
-                                log_debug("Succesffuly validated certificated: %s", X509_verify_cert_error_string(r));
+                                log_error("Failed to validate remote certificate: %s. Aborting connection ...", X509_verify_cert_error_string(r));
+                                return 0;
                 }
         }