diff options
| author | Zbigniew Lukwinski <zbigniew.lukwinski@linux.intel.com> | 2019-10-15 09:12:45 +0200 |
|---|---|---|
| committer | Ed Tanous <ed.tanous@intel.com> | 2019-10-22 22:51:33 +0000 |
| commit | 7d0120bf94061b7933ce9551799654d963df81f2 (patch) | |
| tree | b914d064dfc792260e9f1b526589e0418502a579 /http | |
| parent | dede6a98fc6a55da456607128acee0a0b9f591aa (diff) | |
| download | bmcweb-7d0120bf94061b7933ce9551799654d963df81f2.tar.gz bmcweb-7d0120bf94061b7933ce9551799654d963df81f2.zip | |
Prohibit making connection based on old CA cert.
This is fix for issue #107.
Tested:
Reproduction steps from #107 was followed. mTLS way of authentication
was used. As a result connection try based on user certificate
generated from already replaced CA certificate was dropped. Bmcweb
didn't allow make such connection.
Change-Id: I4709927b5fc108e5b26b7db1981ae77c6aa8a5bf
Signed-off-by: Zbigniew Lukwinski <zbigniew.lukwinski@linux.intel.com>
Diffstat (limited to 'http')
| -rw-r--r-- | http/http_server.h | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/http/http_server.h b/http/http_server.h index ef50bf7..82ba9d0 100644 --- a/http/http_server.h +++ b/http/http_server.h @@ -200,6 +200,14 @@ class Server { BMCWEB_LOG_INFO << "Receivied reload signal"; loadCertificate(); + boost::system::error_code ec; + acceptor->cancel(ec); + if (ec) + { + BMCWEB_LOG_ERROR + << "Error while canceling async operations:" + << ec.message(); + } this->startAsyncWaitForSignal(); } else |
