Treat uppercase blocked fingerprints the same as lowercase (#1964)

- Error for invalid on startup 
- Still block the valid blocklist entries when a reload has a bad one
This commit is contained in:
John Maguire authored and GitHub committed 2026-10-16 16:28:37 -04:00
1 parent 49207da077
commit 5bf666dd90
3 files changed
+63 -4

No files matched your search

+1
View File
@@ -8,6 +8,7 @@ pki:
cert: /etc/nebula/host.crt
key: /etc/nebula/host.key
# blocklist is a list of certificate fingerprints that we will refuse to talk to
# Entries are the hex fingerprints shown by `nebula-cert print`, an invalid entry fails startup and reload.
#blocklist:
# - c99d4e650533b92061b09918e838a5a0a6aaee21eed1d12fd937682865936c72
# disconnect_invalid is a toggle to force a client to be disconnected if the certificate is expired or invalid.