From ddd7508f9a56ed4811923e467dba1996e5068310 Mon Sep 17 00:00:00 2001 From: Eric Cornelius Date: Tue, 15 Jul 2014 18:46:49 -0400 Subject: [PATCH] Add ip-based client certificate authentication to https servers --- source/vibe/http/server.d | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/source/vibe/http/server.d b/source/vibe/http/server.d index d2305f3445..78fa6a6f81 100644 --- a/source/vibe/http/server.d +++ b/source/vibe/http/server.d @@ -1191,7 +1191,8 @@ private void handleHTTPConnection(TCPConnection connection, HTTPServerListener l // If this is a HTTPS server, initiate SSL if (listen_info.sslContext) { logTrace("accept ssl"); - ssl_stream = createSSLStreamFL(http_stream, listen_info.sslContext, SSLStreamState.accepting); + // TODO: reverse DNS lookup for peer_name of the incoming connection for SSL client certificate verification purposes + ssl_stream = createSSLStreamFL(http_stream, listen_info.sslContext, SSLStreamState.accepting, null, connection.remoteAddress); http_stream = ssl_stream; }