prosody
2db7b3b65363
certs/localhost.cnf

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Annotate

certs/localhost.cnf @ 13627:2db7b3b65363

core.configmanager: Add function for getting secrets from separate files Idea is to enable easily retrieving of secret values from files outside of the config, e.g. via the method used by systemd credentials. CREDENTIALS_DIRECTORY is expected to be set by the process manager invoking Prosody, so being unset and unavailable from prosodyctl is going to be normal and a warning is reported in that case. Care will have to be taken to make it clear that prosodyctl check will not work with such values. An error is thrown if the directory is unavailable when running under Prosody.
author Kim Alvefur <zash@zash.se>
date Thu, 16 Jan 2025 15:21:34 +0100
parent 7693:93c041d5bb0b
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
5924
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 [v3_extensions]
7692
90ddd53cbe08 certs/localhost.cnf: Make localhost.crt self-signed (thanks jonas)
Kim Alvefur <zash@zash.se>
parents: 5924
diff changeset
2 basicConstraints = CA:TRUE
5924
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 subjectAltName = @subject_alternative_name
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
5 [subject_alternative_name]
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6 DNS.0 = localhost
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
7 otherName.0 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-client.localhost
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
8 otherName.1 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-server.localhost
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
9 otherName.2 = 1.3.6.1.5.5.7.8.5;FORMAT:UTF8,UTF8:localhost
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
10
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
11 [distinguished_name]
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
12 countryName = GB
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
13 organizationName = Prosody IM
7359
a5a080c12c96 Update every link to the documentation to use HTTPS
Emmanuel Gil Peyrot <linkmauve@linkmauve.fr>
parents: 5924
diff changeset
14 organizationalUnitName = https://prosody.im/doc/certificates
5924
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
15 commonName = Example certificate
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
16
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
17 [req]
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
18 prompt = no
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
19 x509_extensions = v3_extensions
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
20 req_extensions = v3_extensions
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
21 distinguished_name = distinguished_name
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
22