Mercurial > prosody-modules
comparison mod_s2s_never_encrypt_blacklist/README.markdown @ 1803:4d73a1a6ba68
Convert all wiki pages to Markdown
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Fri, 28 Aug 2015 18:03:58 +0200 |
| parents | |
| children |
comparison
equal
deleted
inserted
replaced
| 1802:0ab737feada6 | 1803:4d73a1a6ba68 |
|---|---|
| 1 --- | |
| 2 labels: | |
| 3 - 'Stage-Beta' | |
| 4 summary: | | |
| 5 Stops prosody from including starttls into available features for | |
| 6 specified remote servers. | |
| 7 ... | |
| 8 | |
| 9 Details | |
| 10 ------- | |
| 11 | |
| 12 Let's you stop Prosody from sending \<starttls | |
| 13 xmlns='urn:ietf:params:xml:ns:xmpp-tls'\> feature to choppy/buggy | |
| 14 servers which therefore would fail to re-negotiate and use a secure | |
| 15 stream. (e.g. [OpenFire | |
| 16 3.7.0](http://issues.igniterealtime.org/browse/OF-405)) | |
| 17 | |
| 18 Usage | |
| 19 ----- | |
| 20 | |
| 21 Copy the plugin into your prosody's modules directory. | |
| 22 | |
| 23 And add it between your enabled modules into the global section | |
| 24 (modules\_enabled). | |
| 25 | |
| 26 Then list each host as follow: | |
| 27 | |
| 28 tls_s2s_blacklist = { "host1.tld", "host2.tld", "host3.tld" } | |
| 29 | |
| 30 In the unfortunate case of OpenFire... you can add the Server's ip | |
| 31 address directly as it may not send proper rfc6121 requests. | |
| 32 | |
| 33 tls_s2s_blacklist_ip = { "a.a.a.a", "b.b.b.b", "c.c.c.c" } | |
| 34 | |
| 35 Compatibility | |
| 36 ------------- | |
| 37 | |
| 38 It's supposed to work with 0.7-0.8.x |