[Amsn-commits] SF.net SVN: amsn:[11999] trunk/amsn

[<bi...@us...>]

Revision: 11999
          http://amsn.svn.sourceforge.net/amsn/?rev=11999&view=rev
Author:   billiob
Date:     2010-03-11 08:08:14 +0000 (Thu, 11 Mar 2010)

Log Message:
-----------
check certificates on tls::import

Modified Paths:
--------------
    trunk/amsn/proxy.tcl
    trunk/amsn/sip.tcl

Modified: trunk/amsn/proxy.tcl
===================================================================
--- trunk/amsn/proxy.tcl	2010-03-11 08:02:36 UTC (rev 11998)
+++ trunk/amsn/proxy.tcl	2010-03-11 08:08:14 UTC (rev 11999)
@@ -92,7 +92,7 @@
 		# now add tls to the socket and return it
 		fconfigure $socket -blocking 1 -buffering none -translation binary
 
-		::tls::import $socket
+		::tls::import $socket -cadir $::CERT_DIR -request 1 -require 1
 
 		# We need to foce the handshake while the socket is blocking for tls to actually work
 		::tls::handshake $socket
@@ -130,7 +130,7 @@
 		# now add tls to the socket and return it
 		fconfigure $socket -blocking 1 -buffering none -translation binary
 
-		::tls::import $socket
+		::tls::import $socket -cadir $::CERT_DIR -request 1 -require 1
 
 		# We need to foce the handshake while the socket is blocking for tls to actually work
 		::tls::handshake $socket
@@ -183,7 +183,7 @@
   upvar port tport
 
   set s [NTLMauthenticate $thost $tport]
-  return [::tls::import $socket]
+  return [::tls::import $socket -cadir $::CERT_DIR -request 1 -require 1]
 
 }
 

Modified: trunk/amsn/sip.tcl
===================================================================
--- trunk/amsn/sip.tcl	2010-03-11 08:02:36 UTC (rev 11998)
+++ trunk/amsn/sip.tcl	2010-03-11 08:08:14 UTC (rev 11999)
@@ -1487,7 +1487,7 @@
 
 				# now add tls to the socket and return it
 				fconfigure $socket -blocking 1 -buffering none -translation binary
-				set sock [::tls::import $socket]
+				set sock [::tls::import $socket -cadir $::CERT_DIR -request 1 -require 1]
 
 				# We need to foce the handshake while the socket is blocking
 				# for tls to actually work
@@ -1529,7 +1529,7 @@
 
 				# now add tls to the socket and return it
 				fconfigure $socket -blocking 1 -buffering none -translation binary
-				set sock [::tls::import $socket]
+				set sock [::tls::import $socket -cadir $::CERT_DIR -request 1 -require 1]
 
 				# We need to foce the handshake while the socket is blocking
 				# for tls to actually work
@@ -1889,7 +1889,7 @@
 
 				# now add tls to the socket and return it
 				fconfigure $socket -blocking 1 -buffering none -translation binary
-				set sock [::tls::import $socket]
+				set sock [::tls::import $socket -cadir $::CERT_DIR -request 1 -require 1]
 
 				# We need to foce the handshake while the socket is blocking
 				# for tls to actually work
@@ -1931,7 +1931,7 @@
 
 				# now add tls to the socket and return it
 				fconfigure $socket -blocking 1 -buffering none -translation binary
-				set sock [::tls::import $socket]
+				set sock [::tls::import $socket -cadir $::CERT_DIR -request 1 -require 1]
 
 				# We need to foce the handshake while the socket is blocking
 				# for tls to actually work


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.