Diff

prosody @ 8198:db82ce3decee

prosody, prosodyctl: Set up TLS settings for HTTPS requests in net.http (part of fix for #659)
author Kim Alvefur <zash@zash.se>
date Fri, 07 Jul 2017 20:42:35 +0200
parent 7877:23c7e3bfd299
child 8201:a0ad62a269df
child 8202:85a60e863509
line wrap: on
line diff
--- a/prosody	Fri Jul 07 20:31:52 2017 +0200
+++ b/prosody	Fri Jul 07 20:42:35 2017 +0200
@@ -323,7 +323,11 @@
 		return function() end
 	end});
 
-	require "net.http"
+	local http = require "net.http"
+	local config_ssl = config.get("*", "ssl")
+	local https_client = config.get("*", "client_https_ssl")
+	http.default.options.sslctx = require "core.certmanager".create_context("client_https port 0", "client",
+		{ capath = config_ssl.capath, cafile = config_ssl.cafile, verify = "peer", }, https_client);
 
 	require "util.array"
 	require "util.datetime"