XMPP: verify TLS against JID domain, not the host.

Partially fixes #820.

A full fix requires patching https://github.com/matterbridge/go-xmpp to use DNS SRV records.
This commit is contained in:
Kousu
2019-05-28 12:18:26 -04:00
committed by Wim
parent 6e8f535e8b
commit 3f38ed0407

View File

@@ -100,7 +100,7 @@ func (b *Bxmpp) Send(msg config.Message) (string, error) {
func (b *Bxmpp) createXMPP() error {
tc := &tls.Config{
ServerName: strings.Split(b.GetString("Server"), ":")[0],
ServerName: strings.Split(b.GetString("Jid"), "@")[1],
InsecureSkipVerify: b.GetBool("SkipTLSVerify"), // nolint: gosec
}
options := xmpp.Options{