Mercurial > prosody-wiki

annotate mod_s2s_never_encrypt_blacklist.wiki @ 211:ef34b35b8a73

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
added second ip option.
author maranda3985@gmail.com
date Sat, 03 Sep 2011 00:16:35 +0000
parents 007a1fe5d2d1
children 8935d59dcf86
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
205
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
1 #labels Stage-Beta
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
2 = Details =
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
3
206
007a1fe5d2d1 mod_s2s_never_encrypt_blacklist: correction.
maranda3985@gmail.com
parents: 205
diff changeset
4 Let's you stop Prosody from sending <starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'> feature to choppy/buggy servers which therefore would fail to re-negotiate and use a secure stream. (e.g. OpenFire)
205
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
5
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
6 = Usage =
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
7
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
8 Copy the plugin into your prosody's modules directory.
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
9
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
10 And add it between your enabled modules into the global section (modules_enabled).
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
11
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
12 Then list each host as follow:
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
13 {{{
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
14 tls_s2s_blacklist = { "host1.tld", "host2.tld", "host3.tld" }
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
15 }}}
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
16
211
ef34b35b8a73 added second ip option.
maranda3985@gmail.com
parents: 206
diff changeset
17 In the unfortunate case of OpenFire... you can add the Server's ip address directly as it may not send proper rfc6121 requests.
ef34b35b8a73 added second ip option.
maranda3985@gmail.com
parents: 206
diff changeset
18 {{{
ef34b35b8a73 added second ip option.
maranda3985@gmail.com
parents: 206
diff changeset
19 tls_s2s_blacklist_ip = { "a.a.a.a", "b.b.b.b", "c.c.c.c" }
ef34b35b8a73 added second ip option.
maranda3985@gmail.com
parents: 206
diff changeset
20 }}}
ef34b35b8a73 added second ip option.
maranda3985@gmail.com
parents: 206
diff changeset
21
205
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
22 = Compatibility =
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
23
97e15fe16c0b wiki: added page for mod_s2s_never_encrypt_blacklist
maranda3985@gmail.com
parents:
diff changeset
24 It's supposed to work with 0.7-0.8.x