Diff

--- a/plugins/mod_tls.lua	Mon Mar 31 21:23:35 2025 +0200
+++ b/plugins/mod_tls.lua	Tue Apr 01 18:31:26 2025 +0200
@@ -55,6 +55,7 @@
 
 	module:log("debug", "Creating context for c2s");
 	local request_client_certs = { verify = { "peer", "client_once", }; };
+	local custom_cert_verification = { verifyext = { "lsec_continue", "lsec_ignore_purpose" }; };
 	local xmpp_alpn = { alpn = "xmpp-server" };
 
 	ssl_ctx_c2s, err_c2s, ssl_cfg_c2s = create_context(host.host, "server", host_c2s, host_ssl, global_c2s); -- for incoming client connections
@@ -67,7 +68,9 @@
 
 	module:log("debug", "Creating context for s2sin");
 	-- for incoming server connections
-	ssl_ctx_s2sin, err_s2sin, ssl_cfg_s2sin = create_context(host.host, "server", host_s2s, host_ssl, global_s2s, request_client_certs);
+	ssl_ctx_s2sin, err_s2sin, ssl_cfg_s2sin = create_context(host.host, "server",
+		host_s2s, host_ssl, global_s2s, request_client_certs, custom_cert_verification
+	);
 	if not ssl_ctx_s2sin then module:log("error", "Error creating contexts for s2sin: %s", err_s2sin); end
 
 	if reload then