MCPcopy Create free account
hub / github.com/Snapchat/KeyDB / tlsCertificateRequiresAuditLogging

Function tlsCertificateRequiresAuditLogging

src/tls.cpp:643–653  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

641}
642
643bool tlsCertificateRequiresAuditLogging(tls_connection* conn){
644 const char* cn = "";
645 if (tlsCheckCertificateAgainstAllowlist(conn, g_pserver->tls_auditlog_blocklist, &cn)) {
646 // Certificate is in exclusion list, no need to audit log
647 serverLog(LL_NOTICE, "Audit Log: disabled for %s", conn->c.fprint);
648 return false;
649 } else {
650 serverLog(LL_NOTICE, "Audit Log: enabled for %s", conn->c.fprint);
651 return true;
652 }
653}
654
655bool tlsValidateCertificateName(tls_connection* conn){
656 const char* cn = "";

Callers 1

tlsHandleEventFunction · 0.85

Calls 2

serverLogFunction · 0.85

Tested by

no test coverage detected