Skip to content

failing TLS client cert check after the FROM: verb does not close TLS/TCP connection #2424

@cconstab

Description

@cconstab

Describe the bug

When a client certificate is checked after using the from verb the connection should be dropped if the check fails.

Steps to reproduce

  1. Use openssl to connect to an atServer and use the from verb (using an atSign that is NOT the atSign of the atServer)
  2. See the test fail but the connection not dropping as it should

Expected behavior

connection should drop if the TLS Client cert fails

Screenshots

╰$ openssl s_client -connect 79b6d83f-5026-5fda-8299-5a0704bd2416.canary.atsign.zone:1029 --quiet 
Connecting to 34.121.124.13
depth=2 C=US, O=Internet Security Research Group, CN=ISRG Root X1
verify return:1
depth=1 C=US, O=Let's Encrypt, CN=R12
verify return:1
depth=0 CN=79b6d83f-5026-5fda-8299-5a0704bd2416.canary.atsign.zone
verify return:1
@from:@garycasey
error:AT0401-Exception: Certificate Verification Failed
@

Smartphones

  • atServer

Were you using an atApplication when the bug was found?

No response

Additional context

No response

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions