prosody-modules
f2363e6d9a64
mod_checkcerts/README.markdown
Software / code / prosody-modules
File
mod_checkcerts/README.markdown @ 5390:f2363e6d9a64
mod_http_oauth2: Advertise the currently supported id_token signing algorithm
This field is REQUIRED. The algorithm RS256 MUST be included, but isn't
because we don't implement it, as that would require implementing a pile
of additional cryptography and JWT stuff. Instead the id_token is
signed using the client secret, which allows verification by the client,
since it's a shared secret per OpenID Connect Core 1.0 § 10.1 under
Symmetric Signatures.
OpenID Connect Discovery 1.0 has a lot of REQUIRED and MUST clauses that
are not supported here, but that's okay because this is served from the
RFC 8414 OAuth 2.0 Authorization Server Metadata .well-known endpoint!
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Sun, 30 Apr 2023 16:13:40 +0200 |
| parent | 3182:9e5616a49d59 |
line wrap: on
line source
--- labels: summary: Certificate expiry reminder ... Introduction ============ This module periodically checks your certificate to see if it is about to expire soon. The time before expiry is printed in the logs. About a week before a certificate expires, reminder messages will be sent to admins. Configuration ============= Simply add the module to the `modules_enabled` list. You can optionally configure how long before expiry to start sending messages to admins. modules_enabled = { ... "checkcerts" } checkcerts_notify = 7 -- ( in days ) Compatibility ============= Needs LuaSec 0.5+ Originally written for Prosody 0.9.x, apparently incompatible with 0.10.x.
