diff options
| author | Patrick Cloke <clokep@users.noreply.github.com> | 2021-09-15 08:34:52 -0400 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-09-15 08:34:52 -0400 |
| commit | 8c7a531e277f98ac6b7981b9738649f3a70feb94 (patch) | |
| tree | a6e0088d17ee9c12218d3c21bc163f5cc7231848 /synapse/crypto/context_factory.py | |
| parent | Verify `?chunk_id` actually corresponds to an insertion event that exists (MS... (diff) | |
| download | synapse-8c7a531e277f98ac6b7981b9738649f3a70feb94.tar.xz | |
Use direct references for some configuration variables (part 2) (#10812)
Diffstat (limited to 'synapse/crypto/context_factory.py')
| -rw-r--r-- | synapse/crypto/context_factory.py | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/synapse/crypto/context_factory.py b/synapse/crypto/context_factory.py index c644b4dfc5..d310976fe3 100644 --- a/synapse/crypto/context_factory.py +++ b/synapse/crypto/context_factory.py @@ -102,7 +102,7 @@ class FederationPolicyForHTTPS: self._config = config # Check if we're using a custom list of a CA certificates - trust_root = config.federation_ca_trust_root + trust_root = config.tls.federation_ca_trust_root if trust_root is None: # Use CA root certs provided by OpenSSL trust_root = platformTrust() @@ -113,7 +113,7 @@ class FederationPolicyForHTTPS: # moving to TLS 1.2 by default, we want to respect the config option if # it is set to 1.0 (which the alternate option, raiseMinimumTo, will not # let us do). - minTLS = _TLS_VERSION_MAP[config.federation_client_minimum_tls_version] + minTLS = _TLS_VERSION_MAP[config.tls.federation_client_minimum_tls_version] _verify_ssl = CertificateOptions( trustRoot=trust_root, insecurelyLowerMinimumTo=minTLS @@ -125,10 +125,10 @@ class FederationPolicyForHTTPS: self._no_verify_ssl_context = _no_verify_ssl.getContext() self._no_verify_ssl_context.set_info_callback(_context_info_cb) - self._should_verify = self._config.federation_verify_certificates + self._should_verify = self._config.tls.federation_verify_certificates self._federation_certificate_verification_whitelist = ( - self._config.federation_certificate_verification_whitelist + self._config.tls.federation_certificate_verification_whitelist ) def get_options(self, host: bytes): |