solved requested changes
enhance error handling for TLS connections and improve attack detection
This commit is contained in:
		
							parent
							
								
									9e9036280d
								
							
						
					
					
						commit
						3bdae474b1
					
				| @ -93,13 +93,9 @@ impl NodeServer { | ||||
| 
 | ||||
|                 let conn = if let Err(e) = conn { | ||||
|                     println!("Error accepting TLS connection: {e}"); | ||||
|                     let attack_error_messages = [ | ||||
|                         "HandshakeFailure", | ||||
|                         "peer sent no certificates", // "NoCertificatesPresented",
 | ||||
|                         "Not found quote extension", | ||||
|                     ]; | ||||
|                     let attack_error_messages = ["handshake", "certificate", "quote"]; | ||||
| 
 | ||||
|                     let err_str = e.to_string(); | ||||
|                     let err_str = e.to_string().to_lowercase(); | ||||
|                     if attack_error_messages.iter().any(|att_er_str| err_str.contains(att_er_str)) { | ||||
|                         state.increase_net_attacks().await; | ||||
|                     } | ||||
| @ -204,6 +200,7 @@ impl Update for NodeServer { | ||||
|                             yield Ok(update.update); | ||||
|                         } | ||||
|                         // TODO: check if disconnect client if too many connections are active
 | ||||
|                         // Its tested and working
 | ||||
|                         if tx.receiver_count() > 9 { | ||||
|                             error_status = Status::internal("Already have too many clients. Connect to another server."); | ||||
|                             break; | ||||
|  | ||||
		Loading…
	
		Reference in New Issue
	
	Block a user