Ensure that bridges verify certificates by default when using TLS.
Thanks to Stefan Borsje.
This commit is contained in:
parent
2669979502
commit
b8e34b0b05
@ -1,3 +1,9 @@
|
|||||||
|
1.3.2 - 2014xxxx
|
||||||
|
================
|
||||||
|
|
||||||
|
Broker:
|
||||||
|
- Ensure that bridges verify certificates by default when using TLS.
|
||||||
|
|
||||||
1.3.1 - 20140324
|
1.3.1 - 20140324
|
||||||
================
|
================
|
||||||
|
|
||||||
|
@ -122,6 +122,7 @@ int mqtt3_bridge_new(struct mosquitto_db *db, struct _mqtt3_bridge *bridge)
|
|||||||
new_context->tls_capath = new_context->bridge->tls_capath;
|
new_context->tls_capath = new_context->bridge->tls_capath;
|
||||||
new_context->tls_certfile = new_context->bridge->tls_certfile;
|
new_context->tls_certfile = new_context->bridge->tls_certfile;
|
||||||
new_context->tls_keyfile = new_context->bridge->tls_keyfile;
|
new_context->tls_keyfile = new_context->bridge->tls_keyfile;
|
||||||
|
new_context->tls_cert_reqs = SSL_VERIFY_PEER;
|
||||||
new_context->tls_version = new_context->bridge->tls_version;
|
new_context->tls_version = new_context->bridge->tls_version;
|
||||||
new_context->tls_insecure = new_context->bridge->tls_insecure;
|
new_context->tls_insecure = new_context->bridge->tls_insecure;
|
||||||
#ifdef REAL_WITH_TLS_PSK
|
#ifdef REAL_WITH_TLS_PSK
|
||||||
|
Loading…
Reference in New Issue
Block a user