Software /
code /
prosody-modules
Diff
mod_s2s_log_certs/README.markdown @ 1803:4d73a1a6ba68
Convert all wiki pages to Markdown
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Fri, 28 Aug 2015 18:03:58 +0200 |
parent | 1787:663e5d923ef0 |
child | 1810:2905137cf541 |
line wrap: on
line diff
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/mod_s2s_log_certs/README.markdown Fri Aug 28 18:03:58 2015 +0200 @@ -0,0 +1,41 @@ +--- +summary: Log certificate status and fingerprint of remote servers +... + +Introduction +============ + +This module produces info level log messages with the certificate status +and fingerprint every time an s2s connection is established. It can also +optionally store this in persistant storage. + +**info** jabber.org has a trusted valid certificate with SHA1: +11:C2:3D:87:3F:95:F8:13:F8:CA:81:33:71:36:A7:00:E0:01:95:ED + +Fingerprints could then be added to +[mod\_s2s\_auth\_fingerprint](mod_s2s_auth_fingerprint.md). + +Configuration +============= + +Add the module to the `modules_enabled` list. + + modules_enabled = { + ... + "s2s_log_certs"; + } + +If you want to keep track of how many times, and when a certificate is +seen add + +`s2s_log_certs_persist = true` + +Compatibility +============= + + ------- -------------- + trunk Works + 0.10 Works + 0.9 Works + 0.8 Doesn't work + ------- --------------