Open
Description
Describe the bug
The docs presently state:
If the user who is trying to connect is not the owner of the atServer, then the from
verb should respond with the following response.
proof:<sessionid>@<@sign>:<UUID>
If the user is not allowed to connect to the atServer, then it should respond back with the following error and close the connection to the server.
error:AT0013-Connection Exception
But if I try from:anotheratsign
then the actual response is:
error:AT0401-Exception: Certificate Verification Failed
Steps to reproduce
- First I lookup
cpswan
in the atDirectory, which is8fe461b7-9d18-5ccf-9e3b-9ffe4cd09571.canary.atsign.zone:1912
- Then I
openssl s_client 8fe461b7-9d18-5ccf-9e3b-9ffe4cd09571.canary.atsign.zone:1912
- And then I
from:colin
orfrom:@colin
orfrom:infrafon_0058
- The response is
error:AT0401-Exception: Certificate Verification Failed
Expected behavior
The response should be: proof:<sessionid>@<@sign>:<UUID>
Additional context
If I try to use an atSign that doesn't exist e.g. from:anywhere
then I (correctly) get:
error:AT0007-Exception: Unable to find secondary address for atSign:anywhere