Software / code / prosody-modules
Comparison
mod_auth_ccert/README.markdown @ 1803:4d73a1a6ba68
Convert all wiki pages to Markdown
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Fri, 28 Aug 2015 18:03:58 +0200 |
| parent | 1782:mod_auth_ccert/README.wiki@29f3d6b7ad16 |
| child | 1884:153f063c3d1a |
comparison
equal
deleted
inserted
replaced
| 1802:0ab737feada6 | 1803:4d73a1a6ba68 |
|---|---|
| 1 --- | |
| 2 labels: | |
| 3 - 'Stage-Alpha' | |
| 4 - 'Type-Auth' | |
| 5 summary: Client Certificate authentication module | |
| 6 ... | |
| 7 | |
| 8 Introduction | |
| 9 ============ | |
| 10 | |
| 11 This module implements PKI-style client certificate authentication. You | |
| 12 will therefore need your own Certificate Authority. How to set that up | |
| 13 is beyond the current scope of this document. | |
| 14 | |
| 15 Configuration | |
| 16 ============= | |
| 17 | |
| 18 | |
| 19 authentication = "ccert" | |
| 20 certificate_match = "xmppaddr" -- or "email" | |
| 21 | |
| 22 c2s_ssl = { | |
| 23 capath = "/path/to/dir/with/your/ca" | |
| 24 } | |
| 25 | |
| 26 `capath` should be pointed to a directory with your own CA certificate. | |
| 27 You will need to run `c_rehash` in it. | |
| 28 | |
| 29 Compatibility | |
| 30 ============= | |
| 31 | |
| 32 ----------------- -------------- | |
| 33 trunk Works | |
| 34 0.9 and earlier Doesn't work | |
| 35 0.10 and later Works | |
| 36 ----------------- -------------- |