commit 7d0120bf94061b7933ce9551799654d963df81f2
author Zbigniew Lukwinski <zbigniew.lukwinski@linux.intel.com> Tue Oct 15 09:12:45 2019 +0200
committer Ed Tanous <ed.tanous@intel.com> Tue Oct 22 22:51:33 2019 +0000
tree b914d064dfc792260e9f1b526589e0418502a579
parent dede6a98fc6a55da456607128acee0a0b9f591aa

Prohibit making connection based on old CA cert.

This is fix for issue #107.

Tested:
 Reproduction steps from #107 was followed. mTLS way of authentication
 was used. As a result connection try based on user certificate
 generated from already replaced CA certificate was dropped. Bmcweb
 didn't allow make such connection.

Change-Id: I4709927b5fc108e5b26b7db1981ae77c6aa8a5bf
Signed-off-by: Zbigniew Lukwinski <zbigniew.lukwinski@linux.intel.com>

http/http_server.h

diff --git a/http/http_server.h b/http/http_server.h
index ef50bf7..82ba9d0 100644
--- a/http/http_server.h
+++ b/http/http_server.h
@@ -200,6 +200,14 @@
                 {
                     BMCWEB_LOG_INFO << "Receivied reload signal";
                     loadCertificate();
+                    boost::system::error_code ec;
+                    acceptor->cancel(ec);
+                    if (ec)
+                    {
+                        BMCWEB_LOG_ERROR
+                            << "Error while canceling async operations:"
+                            << ec.message();
+                    }
                     this->startAsyncWaitForSignal();
                 }
                 else