Software /
code /
prosody
Annotate
certs/localhost.cnf @ 13089:41598b7ec543
mod_admin_shell: Refactor 'cert' column
Removes some dead code and hopefully simplifies a bit.
There's a tree of possibilities with the two tri-state status
properties, something like
chain:
* nil -- cert validation disabled?
* invalid -- something wrong with the chain (including ee cert)
* valid -- chain ok
cert:
* nil -- incomplete validation??
* invalid -- mismatched names or such
* valid -- all good!
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Sun, 30 Apr 2023 23:45:55 +0200 |
parent | 7693:93c041d5bb0b |
rev | line source |
---|---|
5924
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
1 [v3_extensions] |
7692
90ddd53cbe08
certs/localhost.cnf: Make localhost.crt self-signed (thanks jonas)
Kim Alvefur <zash@zash.se>
parents:
5924
diff
changeset
|
2 basicConstraints = CA:TRUE |
5924
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
3 subjectAltName = @subject_alternative_name |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
4 |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
5 [subject_alternative_name] |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
6 DNS.0 = localhost |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
7 otherName.0 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-client.localhost |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
8 otherName.1 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-server.localhost |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
9 otherName.2 = 1.3.6.1.5.5.7.8.5;FORMAT:UTF8,UTF8:localhost |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
10 |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
11 [distinguished_name] |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
12 countryName = GB |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
13 organizationName = Prosody IM |
7359
a5a080c12c96
Update every link to the documentation to use HTTPS
Emmanuel Gil Peyrot <linkmauve@linkmauve.fr>
parents:
5924
diff
changeset
|
14 organizationalUnitName = https://prosody.im/doc/certificates |
5924
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
15 commonName = Example certificate |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
16 |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
17 [req] |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
18 prompt = no |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
19 x509_extensions = v3_extensions |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
20 req_extensions = v3_extensions |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
21 distinguished_name = distinguished_name |
f44c1dabd4e9
Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff
changeset
|
22 |