Skip to content

Commit c8acb46

Browse files
Fix basic auth denial for proxy-protocol cert clients
Signed-off-by: Pieter Hollander <eclipse@hollander.online>
1 parent b3b4d77 commit c8acb46

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

src/handle_connect.c

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1248,7 +1248,8 @@ int handle__connect(struct mosquitto *context)
12481248
}
12491249
}else{
12501250
#ifdef WITH_TLS
1251-
if(context->listener->ssl_ctx && (context->listener->use_identity_as_username || context->listener->use_subject_as_username)){
1251+
if((context->listener->ssl_ctx || context->listener->enable_proxy_protocol > 0)
1252+
&& (context->listener->use_identity_as_username || context->listener->use_subject_as_username)){
12521253
/* Authentication assumed to be cleared */
12531254
}else
12541255
#endif

0 commit comments

Comments
 (0)