Kyoshiro/bip
1
0
Fork 0
forked from bip/bip
Code Pull Requests Activity

SSL:

Browse Source 
check for client_side_ssl_pem file to be present
This commit is contained in:
Loc Gomez 2008-01-07 23:46:29 +01:00
parent 47807cd2b3
commit 4d97f4ebcd
1 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
src/bip.c
View File

@ -20,6 +20,9 @@
#include <string.h>
#include <sys/time.h>
#include <sys/resource.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>
#include "irc.h"
#include "conf.h"
#include "tuple.h"
@ -843,6 +846,28 @@ static int validate_config(bip_t *bip)
}
}
if (conf_css && conf_ssl_certfile) {
int e, fd;
struct stat fs;
e = stat(conf_ssl_certfile, &fs);
if (e)
mylog(LOG_WARN, "Unable to check PEM file is ok "
"stat(): %s", strerror(errno));
else if (!fs.st_ino)
conf_die(bip, "Inexistent PEM file %s", conf_ssl_certfile);
else if ( (fs.st_mode & S_IROTH) | (fs.st_mode & S_IWOTH) )
conf_die(bip, "PEM file %s should not be world readable / "
"writable. Please fix the modes.",
conf_ssl_certfile);
if ( (fd = open(conf_ssl_certfile, O_RDONLY)) == -1) {
conf_die(bip, "Unable to open PEM file %s for reading",
conf_ssl_certfile);
}
close(fd);
}
if (strstr(conf_log_format, "%u") == NULL)
mylog(LOG_WARN, "log_format does not contain %%u, all users'"
" logs will be mixed !");