ip masks can be the same across TLS configs for the same server

cfal · Mar 13, 2022 · a80a573 · a80a573
1 parent 8daf03a
commit a80a573
Showing 1 changed file with 4 additions and 9 deletions.
diff --git a/src/tcp.rs b/src/tcp.rs
@@ -146,15 +146,10 @@ pub async fn run_tcp_server(
 
                 let mut config_lookup_table = IpLookupTable::new();
                 for (addr, masklen) in allowed_ips.iter() {
-                    if tls_lookup_table
-                        .insert(addr.clone(), *masklen, true)
-                        .is_some()
-                    {
-                        panic!(
-                            "Address {}/{} is duplicated in the TLS config.",
-                            addr, masklen
-                        );
-                    }
+                    // addresses can be the same across different TLS configs
+                    let _ = tls_lookup_table.insert(addr.clone(), *masklen, true);
+
+                    // .. but shouldn't be duplicated in a single config.
                     if config_lookup_table
                         .insert(addr.clone(), *masklen, true)
                         .is_some()