walkero
/
nghttp2
1
0
Fork 0
Code Issues Pull Requests Projects Releases 1 Wiki Activity

nghttpx: Drop connection if HTTP/2 security level is not satisfied on backend

This commit is contained in:
Tatsuhiro Tsujikawa 2014-06-11 00:19:54 +09:00
parent 492b42e6e9
commit 24762db8f5
1 changed files with 21 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
src/shrpx_http2_session.cc
View File

@ -257,15 +257,14 @@ void eventcb(bufferevent *bev, short events, void *ptr)
SSLOG(INFO, http2session) << "Connection established"; SSLOG(INFO, http2session) << "Connection established";
} }
http2session->set_state(Http2Session::CONNECTED); http2session->set_state(Http2Session::CONNECTED);
if(!get_config()->downstream_no_tls) { if(!get_config()->downstream_no_tls &&
if(!ssl::check_http2_requirement(http2session->get_ssl()) || !get_config()->insecure &&
(!get_config()->insecure && http2session->check_cert() != 0)) { http2session->check_cert() != 0) {
http2session->disconnect(); http2session->disconnect();
return; return;
} }
}
if(http2session->on_connect() != 0) { if(http2session->on_connect() != 0) {
http2session->disconnect(); http2session->disconnect();
@ -1268,11 +1267,27 @@ int Http2Session::on_connect()
return -1; return -1;
} }
if(!get_config()->downstream_no_tls &&
!ssl::check_http2_requirement(ssl_)) {
rv = terminate_session(NGHTTP2_INADEQUATE_SECURITY);
if(rv != 0) {
return -1;
}
}
rv = send(); rv = send();
if(rv != 0) { if(rv != 0) {
return -1; return -1;
} }
if(!get_config()->downstream_no_tls &&
!ssl::check_http2_requirement(ssl_)) {
return 0;
}
// submit pending request // submit pending request
for(auto dconn : dconns_) { for(auto dconn : dconns_) {
if(dconn->push_request_headers() != 0) { if(dconn->push_request_headers() != 0) {