From: Aki Tuomi <aki.tuomi@open-xchange.com>
Date: Tue, 31 Dec 2024 10:21:32 +0000 (+0200)
Subject: lib-auth-client: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp fields
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e78e321d0728e07d0c0d42f819875178a8063a10;p=thirdparty%2Fdovecot%2Fcore.git

lib-auth-client: Add ssl_client_cert_fp and ssl_client_cert_pubkey_fp fields
---

diff --git a/src/lib-auth-client/auth-client-request.c b/src/lib-auth-client/auth-client-request.c
index 99351b07b8..625dca4642 100644
--- a/src/lib-auth-client/auth-client-request.c
+++ b/src/lib-auth-client/auth-client-request.c
@@ -64,6 +64,18 @@ auth_server_send_new_request(struct auth_client_connection *conn,
 		event_add_str(request->event, "certificate_user",
 			      info->cert_username);
 	}
+	if (info->ssl_client_cert_fp != NULL) {
+		str_append(str, "\tssl_client_cert_fp=");
+		str_append_tabescaped(str, info->ssl_client_cert_fp);
+		event_add_str(request->event, "ssl_client_cert_fp",
+			      info->ssl_client_cert_fp);
+	}
+	if (info->ssl_client_cert_pubkey_fp != NULL) {
+		str_append(str, "\tssl_client_cert_pubkey_fp=");
+		str_append_tabescaped(str, info->ssl_client_cert_pubkey_fp);
+		event_add_str(request->event, "ssl_client_cert_pubkey_fp",
+			      info->ssl_client_cert_pubkey_fp);
+	}
 	if (info->local_ip.family != 0) {
 		str_printfa(str, "\tlip=%s", net_ip2addr(&info->local_ip));
 		event_add_ip(request->event, "local_ip", &info->local_ip);
diff --git a/src/lib-auth-client/auth-client.h b/src/lib-auth-client/auth-client.h
index ebc7add057..00334a0077 100644
--- a/src/lib-auth-client/auth-client.h
+++ b/src/lib-auth-client/auth-client.h
@@ -58,6 +58,8 @@ struct auth_request_info {
 	const char *ssl_pfs;
 	const char *ssl_protocol;
 	const char *ssl_ja3_hash;
+	const char *ssl_client_cert_fp;
+	const char *ssl_client_cert_pubkey_fp;
 
 	enum auth_request_flags flags;