Changeset 1155:d00b5914351e in freeDiameter for libfdcore/p_cnx.c

Timestamp:

May 28, 2013, 1:11:27 PM (11 years ago)

Author:

Sebastien Decugis <sdecugis@freediameter.net>

Branch:

default

Phase:

public

Message:

Allow running freeDiameter without TLS credentials if the following conditions are verified:

• The Secure Diameter port is disabled (SecPort? = 0;)
• The old TLS mechanism is not used (TLS_old_method; not defined)

Note that in this context only connections to peers explicitely authorized for 'No_TLS' are
permitted.

File:

• libfdcore/p_cnx.c (modified) (1 diff)

libfdcore/p_cnx.c

@@ -129 +129 @@
         }
         
+        /* Check if we are able to communicate with this peer */
+        if (fd_g_config->cnf_sec_data.tls_disabled && ( peer->p_hdr.info.config.pic_flags.sec != PI_SEC_NONE)) {
+                LOG_E("Peer '%s' not configured for No_TLS and TLS is locally disabled; giving up connection attempts", 
+                                        peer->p_hdr.info.pi_diamid);
+                fd_psm_terminate( peer, NULL );
+                return 0;
+        }
+        
         /* Cleanup any previous list */
         empty_connection_list(peer);