Changeset f94938c in mod_gnutls for src/gnutls_hooks.c

Timestamp:

Jan 22, 2020, 12:39:42 PM (13 months ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

asyncio, master, proxy-ticket

Children:

4fe52e6

Parents:

fcad37b

Message:

Nicer logging for post-handshake authentication

File:

• src/gnutls_hooks.c (modified) (2 diffs)

src/gnutls_hooks.c

@@ -1449 +1449 @@
         client_verify_mode = dc->client_verify_mode;
 
+    char *verify_mode;
     if (client_verify_mode == GNUTLS_CERT_IGNORE)
-    {
-        ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r,
-                      "%s: verify mode is \"ignore\"", __func__);
+        verify_mode = "ignore";
+    else if (client_verify_mode == GNUTLS_CERT_REQUEST)
+        verify_mode = "request";
+    else if (client_verify_mode == GNUTLS_CERT_REQUIRE)
+        verify_mode = "require";
+    else
+        verify_mode = "(undefined)";
+    ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r,
+                  "%s: verify mode is \"%s\"", __func__, verify_mode);
+
+    if (client_verify_mode == GNUTLS_CERT_IGNORE)
+    {
         return DECLINED;
     }
@@ -1470 +1480 @@
     {
         ap_log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r,
-                      "%s: No certificate, attempting to reauthenticate "
-                      "peer (%d)",
+                      "%s: No certificate, attempting post-handshake "
+                      "authentication (%d)",
                       __func__, client_verify_mode);