yuanbiao
/
emqx
1
0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(ws connection): fix peer_cert_as_username error when ws connect

This commit is contained in:
zhanghongtong 2021-04-14 10:53:14 +08:00 committed by turtleDeng
parent 7d003e0bfc
commit 1eb0f7b3b2
3 changed files with 29 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
etc/listeners.conf
View File

@ -544,6 +544,16 @@ listener.ws.external.verify_protocol_header = on
## Value: Duration ## Value: Duration
## listener.ws.external.proxy_protocol_timeout = 3s ## listener.ws.external.proxy_protocol_timeout = 3s
## See: listener.ssl.$name.peer_cert_as_username
##
## Value: cn
## listener.ws.external.peer_cert_as_username = cn
## See: listener.ssl.$name.peer_cert_as_clientid
##
## Value: cn
## listener.ws.external.peer_cert_as_clientid = cn
## The TCP backlog of external MQTT/WebSocket Listener. ## The TCP backlog of external MQTT/WebSocket Listener.
## ##
## See: listener.ws.$name.backlog ## See: listener.ws.$name.backlog

6
priv/emqx.schema
View File

@ -1587,7 +1587,11 @@ end}.
]}. ]}.
{mapping, "listener.ws.$name.peer_cert_as_username", "emqx.listeners", [ {mapping, "listener.ws.$name.peer_cert_as_username", "emqx.listeners", [
{datatype, {enum, [cn, dn, crt]}} {datatype, {enum, [cn]}}
]}.
{mapping, "listener.ws.$name.peer_cert_as_clientid", "emqx.listeners", [
{datatype, {enum, [cn]}}
]}. ]}.
%%-------------------------------------------------------------------- %%--------------------------------------------------------------------

22
src/emqx_ws_connection.erl
View File

@ -196,15 +196,21 @@ init(Req, Opts) ->
end. end.
websocket_init([Req, Opts]) -> websocket_init([Req, Opts]) ->
Peername = case proplists:get_bool(proxy_protocol, Opts) {Peername, Peercert} =
andalso maps:get(proxy_header, Req) of case proplists:get_bool(proxy_protocol, Opts)
#{src_address := SrcAddr, src_port := SrcPort} -> andalso maps:get(proxy_header, Req) of
{SrcAddr, SrcPort}; #{src_address := SrcAddr, src_port := SrcPort, ssl := SSL} ->
_ -> ProxyName = {SrcAddr, SrcPort},
cowboy_req:peer(Req) %% Notice: Only CN is available in Proxy Protocol V2 additional info
end, ProxySSL = case maps:get(cn, SSL, undefined) of
undeined -> nossl;
CN -> [{pp2_ssl_cn, CN}]
end,
{ProxyName, ProxySSL};
_ ->
{cowboy_req:peer(Req), cowboy_req:cert(Req)}
end,
Sockname = cowboy_req:sock(Req), Sockname = cowboy_req:sock(Req),
Peercert = cowboy_req:cert(Req),
WsCookie = try cowboy_req:parse_cookies(Req) WsCookie = try cowboy_req:parse_cookies(Req)
catch catch
error:badarg -> error:badarg ->