File

mod_disable_tls/README.markdown @ 4433:0e3f5f70a51d

mod_auth_ccert/README: Add certificate purpose conifg to example Thanks debacle By default Prosody validates all client certificates as if they were server certificates, for historical reasons, from a time when you couldn't get certificates with the client purpose.
author Kim Alvefur <zash@zash.se>
date Sat, 06 Feb 2021 22:15:08 +0100
parent 1803:4d73a1a6ba68
line wrap: on
line source

---
labels:
- 'Stage-Beta'
summary: Disable TLS on certain client ports
...

Introduction
============

This module can be used to prevent Prosody from offering TLS on client
ports that you specify. This can be useful to work around buggy clients
when transport security is not required.

Configuration
=============

Load the module, and set `disable_tls_ports` to a list of ports:

        disable_tls_ports = { 5322 }

Don't forget to add any extra ports to c2s\_ports, so that Prosody is
actually listening for connections!

Compatibility
=============

  ----- -------
  0.9   Works
  ----- -------