Various Fixes

- Added support for this functionality to connecting registry
- replicas
- Renamed the property to IceGrid.Registry.RequireNodeCertCN and
  added IceGrid.Registry.RequireReplicaCertCN
- Use the IceGrid::PermissionDeniedException to reject the connection
  and print an appropriate error message on the node side.
- Reject non SSL connections if the property is configured
- Added support for the property in the secure IceGrid demo.

1 files changed, 8 insertions, 0 deletions

diff --git a/cpp/src/IceGrid/ReplicaSessionManager.cpp b/cpp/src/IceGrid/ReplicaSessionManager.cpp
index 57997d60027..b2114dc1b12 100644
--- a/cpp/src/IceGrid/ReplicaSessionManager.cpp
+++ b/cpp/src/IceGrid/ReplicaSessionManager.cpp
@@ -500,6 +500,14 @@ ReplicaSessionManager::createSession(InternalRegistryPrx& registry, IceUtil::Tim
         }
         exception.reset(ex.ice_clone());
     }
+    catch(const PermissionDeniedException& ex)
+    {
+        if(_traceLevels)
+        {
+            _traceLevels->logger->error("connection to the the registry `" + _name + "' was denied:\n" + ex.reason);
+        }
+        exception.reset(ex.ice_clone());
+    }
     catch(const Ice::Exception& ex)
     {
         exception.reset(ex.ice_clone());