mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-04 13:47:41 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

certmanager, hostmanager, mod_tls: Move responsibility for creating per-host SSL contexts to mod_tls, meaning reloading certs is now as trivial as reloading mod_tls

Browse source
This commit is contained in:
Matthew Wild 2010-11-06 18:28:15 +00:00
parent c5bcc70db6
commit c6045f3c70
3 changed files with 14 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

12
plugins/mod_tls.lua
View file

@ -6,6 +6,7 @@
-- COPYING file in the source package for more information.
--
local create_context = require "core.certmanager".create_context;
local st = require "util.stanza";
local secure_auth_only = module:get_option("c2s_require_encryption") or module:get_option("require_encryption");
@ -87,3 +88,14 @@ module:hook_stanza(xmlns_starttls, "proceed", function (session, stanza)
session.secure = false;
return true;
end);
function module.load()
local ssl_config = module:get_option("ssl");
host.ssl_ctx = create_context(host, "client", ssl_config); -- for outgoing connections
host.ssl_ctx_in = create_context(host, "server", ssl_config); -- for incoming connections
end
function module.unload()
host.ssl_ctx = nil;
host.ssl_ctx_in = nil;
end