Proxmox/pve-apiclient
5
0
Fork 0
mirror of git://git.proxmox.com/git/pve-apiclient.git synced 2024-12-22 17:34:22 +03:00
Code Issues Packages Projects Releases Wiki Activity

raise exception if manual fingerprint verification failed

Browse Source 
If a fingerprint could not be verified automatically or manually
raise an exception to ensure that we do not continue with handling
the problematic or even evil response.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2017-12-14 11:12:06 +01:00 committed by Wolfgang Bumiller
parent 097484f42d
commit 8153e67107
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
PVE/APIClient/LWP.pm
View File

@ -139,8 +139,7 @@ sub manual_verify_fingerprint {
my ($self, $fingerprint) = @_; my ($self, $fingerprint) = @_;
if (!$self->{manual_verification}) { if (!$self->{manual_verification}) {
warn "fingerprint: $fingerprint\n"; raise("fingerprint '$fingerprint' not verified, abort!\n");
return 0;
} }
print "The authenticity of host '$self->{host}' can't be established.\n" . print "The authenticity of host '$self->{host}' can't be established.\n" .
@ -153,6 +152,8 @@ sub manual_verify_fingerprint {
$self->{cached_fingerprints}->{$fingerprint} = $valid; $self->{cached_fingerprints}->{$fingerprint} = $valid;
raise("Fingerprint not verified, abort!\n") if !$valid;
if (my $cb = $self->{register_fingerprint_cb}) { if (my $cb = $self->{register_fingerprint_cb}) {
$cb->($fingerprint) if $valid; $cb->($fingerprint) if $valid;
} }