Mercurial > prosody-modules
comparison mod_auth_ccert/README.wiki @ 1782:29f3d6b7ad16
Import wiki pages
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Mon, 24 Aug 2015 16:43:56 +0200 |
| parents | |
| children |
comparison
equal
deleted
inserted
replaced
| 1781:12ac88940fe3 | 1782:29f3d6b7ad16 |
|---|---|
| 1 #summary Client Certificate authentication module | |
| 2 #labels Stage-Alpha,Type-Auth | |
| 3 | |
| 4 = Introduction = | |
| 5 | |
| 6 This module implements PKI-style client certificate authentication. | |
| 7 You will therefore need your own Certificate Authority. | |
| 8 How to set that up is beyond the current scope of this document. | |
| 9 | |
| 10 = Configuration = | |
| 11 | |
| 12 {{{ | |
| 13 | |
| 14 authentication = "ccert" | |
| 15 certificate_match = "xmppaddr" -- or "email" | |
| 16 | |
| 17 c2s_ssl = { | |
| 18 capath = "/path/to/dir/with/your/ca" | |
| 19 } | |
| 20 | |
| 21 }}} | |
| 22 | |
| 23 `capath` should be pointed to a directory with your own CA certificate. You will need to run `c_rehash` in it. | |
| 24 | |
| 25 = Compatibility = | |
| 26 | |
| 27 ||trunk||Works|| | |
| 28 ||0.9 and earlier||Doesn't work|| | |
| 29 ||0.10 and later||Works|| |