未完成：在ssl_stream_free中检测pinning。

1 files changed, 5 insertions, 0 deletions

diff --git a/plugin/business/ssl-policy/src/ssl_policy.cpp b/plugin/business/ssl-policy/src/ssl_policy.cpp
index dbc5a6e..0448fd8 100644
--- a/plugin/business/ssl-policy/src/ssl_policy.cpp
+++ b/plugin/business/ssl-policy/src/ssl_policy.cpp
@@ -132,6 +132,11 @@ void intercept_param_new_cb(int table_id, const char* key, const char* table_lin
 			if(item && item->type==cJSON_String) param->ssl_min_version=sslver_str2num(item->valuestring);
 			item=cJSON_GetObjectItem(ssl_ver, "max");	
 			if(item && item->type==cJSON_String) param->ssl_max_version=sslver_str2num(item->valuestring);
+			if(param->ssl_min_version<0||param->ssl_max_version<0)
+			{
+				param->mirror_client_version=1;
+				TFE_LOG_ERROR(enforcer->logger, "Invalid intercept parameter: ssl version = %s", item->valuestring);
+			}
 		}
 		item=cJSON_GetObjectItem(ssl_ver, "allow_http2"); 
 		if(item && item->type==cJSON_Number) param->allow_http2=item->valueint;