Mercurial > prosody-wiki
annotate mod_auth_ccert.wiki @ 457:f6d83a7882d8
Created wiki page through web user interface.
| author | MWild1@gmail.com |
|---|---|
| date | Mon, 19 May 2014 10:30:02 +0000 |
| parents | 528721aaea46 |
| children |
| rev | line source |
|---|---|
| 369 | 1 #summary Client Certificate authentication module |
|
381
a21acacc8b22
mod_auth_ccert and mod_auth_ldap2: Add Type-Auth labels
Kim Alvefur <zash@zash.se>
parents:
369
diff
changeset
|
2 #labels Stage-Alpha,Type-Auth |
| 369 | 3 |
| 4 = Introduction = | |
| 5 | |
|
454
528721aaea46
a bunch of pages: strip trailing whitespace
Kim Alvefur <zash@zash.se>
parents:
426
diff
changeset
|
6 This module implements PKI-style client certificate authentication. |
| 369 | 7 You will therefore need your own Certificate Authority. |
| 8 How to set that up is beyond the current scope of this document. | |
| 9 | |
| 10 = Configuration = | |
| 11 | |
| 12 {{{ | |
| 13 | |
| 14 authentication = "ccert" | |
| 15 certificate_match = "xmppaddr" -- or "email" | |
| 16 | |
| 17 c2s_ssl = { | |
| 18 capath = "/path/to/dir/with/your/ca" | |
| 19 } | |
| 20 | |
| 21 }}} | |
| 22 | |
| 426 | 23 `capath` should be pointed to a directory with your own CA certificate. You will need to run `c_rehash` in it. |
| 24 | |
| 369 | 25 = Compatibility = |
| 26 | |
| 27 ||trunk||Works|| | |
| 28 ||0.9 and earlier||Doesn't work|| | |
| 426 | 29 ||0.10 and later||Works|| |