Software / code / prosody
Changeset
6568:b54b33f59c6e
certmanager: Limit certificate chain depth to 9
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Thu, 05 Feb 2015 16:59:34 +0100 |
| parents | 6567:d4a68d93ad04 |
| children | 6569:e6ff3ec99f24 |
| files | core/certmanager.lua |
| diffstat | 1 files changed, 1 insertions(+), 0 deletions(-) [+] |
line wrap: on
line diff
--- a/core/certmanager.lua Thu Feb 05 16:56:28 2015 +0100 +++ b/core/certmanager.lua Thu Feb 05 16:59:34 2015 +0100 @@ -53,6 +53,7 @@ -- Built-in defaults local core_defaults = { capath = "/etc/ssl/certs"; + depth = 9; protocol = "tlsv1+"; verify = (ssl_x509 and { "peer", "client_once", }) or "none"; options = {
