Actually, be *more* clever about client certs...(see e70ec)
This commit is contained in:
parent
bd07cb3507
commit
3a03995f26
1 changed files with 3 additions and 0 deletions
|
@ -105,6 +105,9 @@ func launch(sysConfig SysConfig, userConfig UserConfig, privInfo userInfo) int {
|
|||
} else {
|
||||
tlscfg.MinVersion = tls.VersionTLS13
|
||||
}
|
||||
if len(userConfig.CertificateZones) > 0 || sysConfig.ReadMollyFiles {
|
||||
tlscfg.ClientAuth = tls.RequestClientCert
|
||||
}
|
||||
|
||||
// Try to chdir to /, so we don't block any mountpoints
|
||||
// But if we can't for some reason it's no big deal
|
||||
|
|
Loading…
Reference in a new issue