Skip to content
This repository has been archived by the owner on Nov 2, 2021. It is now read-only.

Invalid/wrong device cert in credential throws warning, connection proceeds #102

Open
tjamison opened this issue Jul 6, 2016 · 0 comments

Comments

@tjamison
Copy link
Contributor

tjamison commented Jul 6, 2016

Connecting to a backend server via TLS, client displays this info in log:

2016-07-06 14:27:12.748 [warning] <0.139.0>@authorize_keys:process_cred_struct_:555 Wrong device_cert in cred
<<... (certificate) ...>>
<<... (certificate) ...>>
2016-07-06 14:27:12.749 [info] <0.116.0>@rvi_log:store_event:350 RVI_LOG: <<"conn:19-8fEt">>/1/<<"authorize">>/<<"cred stored 15eca337 Conn={<<"192.168.18.76">>,<<"9007">>}">>
2016-07-06 14:27:12.749 [info] <0.203.0>@dlink_tls_rpc:connection_authorized:739 dlink_tls:authorize(): Announcing local services: [] to remote "192.168.18.76":9007

Snipped certificate is indeed not the certificate presented for the handshake. However, the connection proceeds as if the credentials checked out OK.

Expected behavior is to terminate connection upon receiving invalid credentials.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant