]> git.proxmox.com Git - proxmox-backup.git/commit - src/client/http_client.rs
fix #3391: improve mismatched fingerprint handling
authorFabian Grünbichler <f.gruenbichler@proxmox.com>
Mon, 10 May 2021 08:52:31 +0000 (10:52 +0200)
committerThomas Lamprecht <t.lamprecht@proxmox.com>
Tue, 11 May 2021 11:12:54 +0000 (13:12 +0200)
commitdda1b4fa446241d2cbc876a026f2e2bd9dbda704
tree30870e7466a0821386bc365ec0dde4cc0d9c58dc
parent68b102269f84435d49bf58bfc44dba973722fe91
fix #3391: improve mismatched fingerprint handling

if the expected fingerprint and the one returned by the server don't
match, print a warning and allow confirmation and proceeding if running
interactive.

previous:

$ proxmox-backup-client ...
Error: error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:../ssl/statem/statem_clnt.c:1915:

new:

$ proxmox-backup-client ...
WARNING: certificate fingerprint does not match expected fingerprint!
expected:    ac:cb:6a:bc:d6:b7:b4:77:3e:17:05:d6:b6:29:dd:1f:05:9c:2b:3a:df:84:3b:4d:f9:06:2c:be:da:06:52:12
fingerprint: ab:cb:6a:bc:d6:b7:b4:77:3e:17:05:d6:b6:29:dd:1f:05:9c:2b:3a:df:84:3b:4d:f9:06:2c:be:da:06:52:12
Are you sure you want to continue connecting? (y/n): n
Error: error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:../ssl/statem/statem_clnt.c:1915:

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
src/client/http_client.rs