Function tlsCheckAgainstAllowlist

src/tls.cpp:522–531

Check to see if a given client name is contained in the provided set (allowlist/blocklist) * Return true if it does */

/* Check to see if a given client name is contained in the provided set (allowlist/blocklist)
 * Return true if it does */
bool tlsCheckAgainstAllowlist(const char * client, std::set<sdsstring> set){
    /* Because of wildcard matching, we need to iterate over the entire set.
     * If we were doing simply straight matching, we could just directly 
     * check to see if the client name is in the set in O(1) time */
    for (auto &client_pattern: set){
        if (stringmatchlen(client_pattern.get(), client_pattern.size(), client, strlen(client), 1))
            return true;
    }
    return false;
}

/* Sets the sha256 certificate fingerprint on the connection
 * Based on the example here https://fm4dd.com/openssl/certfprint.shtm */