mirror of
https://github.com/Icinga/icinga2.git
synced 2025-07-26 23:24:09 +02:00
ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure
refs #6361
This commit is contained in:
parent
eee30750d5
commit
7741517df7
@ -457,6 +457,7 @@ void ApiListener::NewClientHandlerInternal(const Socket::Ptr& client, const Stri
|
||||
} catch (const std::exception&) {
|
||||
Log(LogCritical, "ApiListener")
|
||||
<< "Client TLS handshake failed (" << conninfo << ")";
|
||||
tlsStream->Close();
|
||||
return;
|
||||
}
|
||||
|
||||
@ -471,6 +472,7 @@ void ApiListener::NewClientHandlerInternal(const Socket::Ptr& client, const Stri
|
||||
} catch (const std::exception&) {
|
||||
Log(LogCritical, "ApiListener")
|
||||
<< "Cannot get certificate common name from cert path: '" << GetDefaultCertPath() << "'.";
|
||||
tlsStream->Close();
|
||||
return;
|
||||
}
|
||||
|
||||
@ -480,6 +482,7 @@ void ApiListener::NewClientHandlerInternal(const Socket::Ptr& client, const Stri
|
||||
Log(LogWarning, "ApiListener")
|
||||
<< "Unexpected certificate common name while connecting to endpoint '"
|
||||
<< hostname << "': got '" << identity << "'";
|
||||
tlsStream->Close();
|
||||
return;
|
||||
} else if (!verify_ok) {
|
||||
Log(LogWarning, "ApiListener")
|
||||
@ -529,6 +532,7 @@ void ApiListener::NewClientHandlerInternal(const Socket::Ptr& client, const Stri
|
||||
Log(LogWarning, "ApiListener")
|
||||
<< "No data received on new API connection for identity '" << identity << "'. "
|
||||
<< "Ensure that the remote endpoints are properly configured in a cluster setup.";
|
||||
tlsStream->Close();
|
||||
return;
|
||||
}
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user