From: Simon Ruderich Date: Tue, 22 Mar 2011 16:07:44 +0000 (+0100) Subject: Minor source comment fixes. X-Git-Tag: 0.2~6 X-Git-Url: https://ruderich.org/simon/gitweb/?a=commitdiff_plain;h=cb291e5cd62b9bd9a740e86b85bd4ae84595b3d3;p=tlsproxy%2Ftlsproxy.git Minor source comment fixes. --- diff --git a/src/connection.c b/src/connection.c index 880087b..09bfd0a 100644 --- a/src/connection.c +++ b/src/connection.c @@ -87,7 +87,7 @@ void handle_connection(int client_socket) { char host[MAX_REQUEST_LINE]; char port[5 + 1]; - int version_minor; + int version_minor; /* HTTP/1.x */ int result; /* client_x509_cred is used when talking to the client (acting as a TSL @@ -208,7 +208,7 @@ void handle_connection(int client_socket) { LOG(LOG_DEBUG, "transferring data"); - /* Proxy data between client and server until one suite is done + /* Proxy data between client and server until one side is done * (EOF or error). */ transfer_data(client_socket, server_socket); @@ -222,9 +222,9 @@ void handle_connection(int client_socket) { } } + /* Initialize TLS client credentials to talk to the server. */ result = initialize_tls_session_server(server_socket, &server_session, &server_x509_cred); - /* Initialize TLS client credentials to talk to the server. */ if (0 != result) { LOG(LOG_WARNING, "initialize_tls_session_server() failed"); send_forwarding_failure(client_fd); @@ -250,7 +250,8 @@ void handle_connection(int client_socket) { if (0 != verify_tls_connection(server_session, host)) { LOG(LOG_ERROR, "server certificate validation failed!"); /* We send the error message over our TLS connection to the client, - * but with an invalid certificate. */ + * but with an invalid certificate. No data is transfered from/to the + * target server. */ validation_failed = 1; } @@ -298,7 +299,7 @@ void handle_connection(int client_socket) { LOG(LOG_DEBUG, "transferring TLS data"); - /* Proxy data between client and server until one suite is done (EOF or + /* Proxy data between client and server until one side is done (EOF or * error). */ transfer_data_tls(client_socket, server_socket, client_session, server_session); diff --git a/src/verify.c b/src/verify.c index 6558d42..4cd9d50 100644 --- a/src/verify.c +++ b/src/verify.c @@ -106,7 +106,7 @@ int verify_tls_connection(gnutls_session_t session, const char *hostname) { gnutls_x509_crt_deinit(cert); return -1; } - /* We got the certificate as PEM, free it. */ + /* We got the certificate as PEM, free the crt struct. */ gnutls_x509_crt_deinit(cert); /* Open stored server certificate file. */