From 9e9036280d5deb1e7f01150c4dbde15d6b266b49 Mon Sep 17 00:00:00 2001 From: Noor Date: Wed, 1 Jan 2025 23:37:32 +0000 Subject: [PATCH] handle TLS attack included net attack count on non supported tls connection counted as attack for tls without client cert and missing quote on tls client cert --- src/grpc/server.rs | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/src/grpc/server.rs b/src/grpc/server.rs index 8830c21..626533e 100644 --- a/src/grpc/server.rs +++ b/src/grpc/server.rs @@ -93,7 +93,14 @@ impl NodeServer { let conn = if let Err(e) = conn { println!("Error accepting TLS connection: {e}"); - if e.to_string().contains("HandshakeFailure") { + let attack_error_messages = [ + "HandshakeFailure", + "peer sent no certificates", // "NoCertificatesPresented", + "Not found quote extension", + ]; + + let err_str = e.to_string(); + if attack_error_messages.iter().any(|att_er_str| err_str.contains(att_er_str)) { state.increase_net_attacks().await; } return;