mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-03 05:07:42 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

core.certmanager: Do not ask for client certificates by default

Browse source 
Since it's mostly only mod_s2s that needs to request client
certificates it makes some sense to have mod_s2s ask for this, instead
of having eg mod_http ask to disable it.
This commit is contained in:
Kim Alvefur 2019-03-10 19:58:28 +01:00
parent 5fb7d2d35a
commit 9f65ce7189
3 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
core/certmanager.lua
View file

@ -106,7 +106,7 @@ local core_defaults = {
capath = "/etc/ssl/certs";
depth = 9;
protocol = "tlsv1+";
verify = (ssl_x509 and { "peer", "client_once", }) or "none";
verify = "none";
options = {
cipher_server_preference = luasec_has.options.cipher_server_preference;
no_ticket = luasec_has.options.no_ticket;

3
plugins/mod_http.lua
View file

@ -228,9 +228,6 @@ module:provides("net", {
listener = server.listener;
default_port = 5281;
encryption = "ssl";
ssl_config = {
verify = "none";
};
multiplex = {
pattern = "^[A-Z]";
};

3
plugins/mod_s2s/mod_s2s.lua
View file

@ -738,6 +738,9 @@ module:provides("net", {
listener = listener;
default_port = 5269;
encryption = "starttls";
ssl_config = {
verify = { "peer", "client_once", };
};
multiplex = {
pattern = "^<.*:stream.*%sxmlns%s*=%s*(['\"])jabber:server%1.*>";
};