1
0
Fork 0

Actually, be *more* clever about client certs...(see e70ec)

This commit is contained in:
Solderpunk 2023-03-02 17:24:34 +01:00
parent bd07cb3507
commit 3a03995f26

View file

@ -105,6 +105,9 @@ func launch(sysConfig SysConfig, userConfig UserConfig, privInfo userInfo) int {
} else {
tlscfg.MinVersion = tls.VersionTLS13
}
if len(userConfig.CertificateZones) > 0 || sysConfig.ReadMollyFiles {
tlscfg.ClientAuth = tls.RequestClientCert
}
// Try to chdir to /, so we don't block any mountpoints
// But if we can't for some reason it's no big deal