Added client-side validation of advertise-ip

This commit is contained in:
Ev Kontsevoy 2016-03-01 22:17:00 -08:00
parent 78ae13b0d9
commit a3df6e6768

View file

@ -228,7 +228,14 @@ func applyFileConfig(fc *config.FileConfig, cfg *service.Config) error {
}
}
}
cfg.SSH.AdvertiseIP = fc.SSH.AdvertiseIP
// apply "advertise_ip" setting:
advertiseIP := fc.SSH.AdvertiseIP
if advertiseIP != nil {
if advertiseIP.IsLoopback() || advertiseIP.IsUnspecified() || advertiseIP.IsMulticast() {
return trace.Errorf("unreachable advertise IP: %v", advertiseIP)
}
cfg.SSH.AdvertiseIP = advertiseIP
}
return nil
}