ExternalVendorCode/ZeroTierOne
1
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2025-06-06 01:11:54 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix cert verification check for self signed signatures

Browse Source
This commit is contained in:
Kees Bos 2015-06-26 07:22:13 +02:00
parent 57c7992c78
commit 8a68624dae
1 changed files with 20 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
node/Network.cpp
View File

@ -286,6 +286,15 @@ void Network::addMembershipCertificate(const CertificateOfMembership &cert,bool
return; return;
} }
if (cert.signedBy() == RR->identity.address()) {
// We are the controller: RR->identity.address() == controller() == cert.signedBy()
// So, verify that we signed th cert ourself
if (!cert.verify(RR->identity)) {
TRACE("rejected network membership certificate for %.16llx self signed by %s: signature check failed",(unsigned long long)_id,cert.signedBy().toString().c_str());
return;
}
} else {
SharedPtr<Peer> signer(RR->topology->getPeer(cert.signedBy())); SharedPtr<Peer> signer(RR->topology->getPeer(cert.signedBy()));
if (!signer) { if (!signer) {
@ -300,6 +309,7 @@ void Network::addMembershipCertificate(const CertificateOfMembership &cert,bool
return; return;
} }
} }
}
// If we made it past authentication, update cert // If we made it past authentication, update cert
if (cert.revision() != old.revision()) if (cert.revision() != old.revision())