prosody
eef9a2a53dcb
plugins/mod_tls.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Comparison

plugins/mod_tls.lua @ 13805:eef9a2a53dcb 13.0

mod_tls: Collect full certificate chain validation information Enabling at least one of the ssl.verifyext modes enables a callback that collects all the errors, which are used by mod_s2s to report better problem descriptions.
author Kim Alvefur <zash@zash.se>
date Tue, 01 Apr 2025 20:49:58 +0200
parent 13801:a5d5fefb8b68
comparison
equal deleted inserted replaced
13804:e128ed4494f3 13805:eef9a2a53dcb
61 ssl_ctx_c2s, err_c2s, ssl_cfg_c2s = create_context(host.host, "server", host_c2s, host_ssl, global_c2s); -- for incoming client connections 61 ssl_ctx_c2s, err_c2s, ssl_cfg_c2s = create_context(host.host, "server", host_c2s, host_ssl, global_c2s); -- for incoming client connections
62 if not ssl_ctx_c2s then module:log("error", "Error creating context for c2s: %s", err_c2s); end 62 if not ssl_ctx_c2s then module:log("error", "Error creating context for c2s: %s", err_c2s); end
63 63
64 module:log("debug", "Creating context for s2sout"); 64 module:log("debug", "Creating context for s2sout");
65 -- for outgoing server connections 65 -- for outgoing server connections
66 ssl_ctx_s2sout, err_s2sout, ssl_cfg_s2sout = create_context(host.host, "client", host_s2s, host_ssl, global_s2s, xmpp_alpn); 66 ssl_ctx_s2sout, err_s2sout, ssl_cfg_s2sout = create_context(host.host, "client", host_s2s, host_ssl, global_s2s, xmpp_alpn,
67 custom_cert_verification);
67 if not ssl_ctx_s2sout then module:log("error", "Error creating contexts for s2sout: %s", err_s2sout); end 68 if not ssl_ctx_s2sout then module:log("error", "Error creating contexts for s2sout: %s", err_s2sout); end
68 69
69 module:log("debug", "Creating context for s2sin"); 70 module:log("debug", "Creating context for s2sin");
70 -- for incoming server connections 71 -- for incoming server connections
71 ssl_ctx_s2sin, err_s2sin, ssl_cfg_s2sin = create_context(host.host, "server", 72 ssl_ctx_s2sin, err_s2sin, ssl_cfg_s2sin = create_context(host.host, "server",