|
1782
|
1 #summary Warn admins about outgoing s2s connections that are refused due to invalid or untrusted certificates |
|
|
2 #labels Stage-Alpha |
|
|
3 |
|
|
4 = Introduction = |
|
|
5 |
|
|
6 Similar to mod_watchregistrations, this module warns admins when an s2s connection fails due for encryption or trust reasons. |
|
|
7 |
|
|
8 The certificate shows the SHA1 hash, so it can easily be used together with mod_s2s_auth_fingerprint. |
|
|
9 |
|
|
10 = Configuration = |
|
|
11 |
|
|
12 {{{ |
|
|
13 modules_enabled = { |
|
|
14 -- other modules -- |
|
|
15 "watchuntrusted", |
|
|
16 |
|
|
17 } |
|
|
18 |
|
|
19 untrusted_fail_watchers = { "admin@example.lit" } |
|
|
20 untrusted_fail_notification = "Establishing a secure connection from $from_host to $to_host failed. Certificate hash: $sha1. $errors" |
|
|
21 }}} |
|
|
22 |
|
|
23 || *Option* || *Default* || *Description* || |
|
|
24 || untrusted_fail_watchers || All admins || The users to send the message to || |
|
|
25 || untrusted_fail_notification || "Establishing a secure connection from $from_host to $to_host failed. Certificate hash: $sha1. $errors" || The message to send, $from_host, $to_host, $sha1 and $errors are replaced || |
|
|
26 |
|
|
27 |
|
|
28 = Compatibility = |
|
|
29 |
|
|
30 ||trunk||Works|| |
