annotate certs/localhost.cnf @ 12732:f731eda8a873

Backed out changeset 73a45ba6e3f1 in favour of 427dd01f0864 New behaviour (muc_room_allow_persistent = true, the default): - Parent host users are not restricted by default (prosody:user) - Users without roles (by default that is non-admins, non-parent-host users, and users on other servers) can no longer configure persistence by default. muc_room_allow_persistent = false will restrict persistence to prosody:admin. Parent-host users should not be restricted by default, and this can be configured via the new roles/permissions options.
author Matthew Wild <mwild1@gmail.com>
date Thu, 29 Sep 2022 12:43:09 +0100
parents 93c041d5bb0b
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
5924
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 [v3_extensions]
7692
90ddd53cbe08 certs/localhost.cnf: Make localhost.crt self-signed (thanks jonas)
Kim Alvefur <zash@zash.se>
parents: 5924
diff changeset
2 basicConstraints = CA:TRUE
5924
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 subjectAltName = @subject_alternative_name
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
5 [subject_alternative_name]
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6 DNS.0 = localhost
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
7 otherName.0 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-client.localhost
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
8 otherName.1 = 1.3.6.1.5.5.7.8.7;IA5STRING:_xmpp-server.localhost
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
9 otherName.2 = 1.3.6.1.5.5.7.8.5;FORMAT:UTF8,UTF8:localhost
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
10
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
11 [distinguished_name]
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
12 countryName = GB
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
13 organizationName = Prosody IM
7359
a5a080c12c96 Update every link to the documentation to use HTTPS
Emmanuel Gil Peyrot <linkmauve@linkmauve.fr>
parents: 5924
diff changeset
14 organizationalUnitName = https://prosody.im/doc/certificates
5924
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
15 commonName = Example certificate
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
16
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
17 [req]
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
18 prompt = no
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
19 x509_extensions = v3_extensions
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
20 req_extensions = v3_extensions
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
21 distinguished_name = distinguished_name
f44c1dabd4e9 Makefile, certs: Generate example certificates on build, remove the old static one
Kim Alvefur <zash@zash.se>
parents:
diff changeset
22