Mercurial > prosody-wiki
annotate mod_auth_ccert.wiki @ 435:fae8b0661edf
Add info about _xmpp-server IN TLSA
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Mon, 10 Mar 2014 16:08:19 +0100 |
| parents | 0df264dd44c4 |
| children | 528721aaea46 |
| rev | line source |
|---|---|
| 369 | 1 #summary Client Certificate authentication module |
|
381
a21acacc8b22
mod_auth_ccert and mod_auth_ldap2: Add Type-Auth labels
Kim Alvefur <zash@zash.se>
parents:
369
diff
changeset
|
2 #labels Stage-Alpha,Type-Auth |
| 369 | 3 |
| 4 = Introduction = | |
| 5 | |
| 6 This module implements PKI-style client certificate authentication. | |
| 7 You will therefore need your own Certificate Authority. | |
| 8 How to set that up is beyond the current scope of this document. | |
| 9 | |
| 10 = Configuration = | |
| 11 | |
| 12 {{{ | |
| 13 | |
| 14 authentication = "ccert" | |
| 15 certificate_match = "xmppaddr" -- or "email" | |
| 16 | |
| 17 c2s_ssl = { | |
| 18 capath = "/path/to/dir/with/your/ca" | |
| 19 } | |
| 20 | |
| 21 }}} | |
| 22 | |
| 426 | 23 `capath` should be pointed to a directory with your own CA certificate. You will need to run `c_rehash` in it. |
| 24 | |
| 369 | 25 = Compatibility = |
| 26 | |
| 27 ||trunk||Works|| | |
| 28 ||0.9 and earlier||Doesn't work|| | |
| 426 | 29 ||0.10 and later||Works|| |