changeset 13538:e19a3a2d554d

login: "cert required, client didn't start TLS" error could have been logged wrongly.
author Timo Sirainen <tss@iki.fi>
date Thu, 22 Sep 2011 01:38:34 +0300
parents fbbf2802e11f
children 1ff636720b9f
files src/login-common/client-common.c
diffstat 1 files changed, 2 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/login-common/client-common.c	Wed Sep 21 17:51:59 2011 +0300
+++ b/src/login-common/client-common.c	Thu Sep 22 01:38:34 2011 +0300
@@ -511,7 +511,8 @@
 	/* some auth attempts without SSL/TLS */
 	if (client->auth_tried_disabled_plaintext)
 		return "(tried to use disabled plaintext auth)";
-	if (client->set->auth_ssl_require_client_cert)
+	if (client->set->auth_ssl_require_client_cert &&
+	    client->ssl_proxy == NULL)
 		return "(cert required, client didn't start TLS)";
 	if (client->auth_tried_unsupported_mech)
 		return "(tried to use unsupported auth mechanism)";