Mercurial > prosody-hg

comparison core/certmanager.lua @ 13703:99d2100d2918 13.0

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
core.certmanager: Move LuaSec verification tweaks to mod_s2s These two settings are only really needed for XMPP server-to-server connections.
author Kim Alvefur <zash@zash.se>
date Sat, 15 Feb 2025 00:19:01 +0100
parents 8b68e8faab52
children 49bbdc22846d
comparison
equal deleted inserted replaced
13701:1aa7efabeacb 13703:99d2100d2918
186 no_ticket = tls.features.options.no_ticket; 186 no_ticket = tls.features.options.no_ticket;
187 no_compression = tls.features.options.no_compression and configmanager.get("*", "ssl_compression") ~= true; 187 no_compression = tls.features.options.no_compression and configmanager.get("*", "ssl_compression") ~= true;
188 single_dh_use = tls.features.options.single_dh_use; 188 single_dh_use = tls.features.options.single_dh_use;
189 single_ecdh_use = tls.features.options.single_ecdh_use; 189 single_ecdh_use = tls.features.options.single_ecdh_use;
190 no_renegotiation = tls.features.options.no_renegotiation; 190 no_renegotiation = tls.features.options.no_renegotiation;
191 };
192 verifyext = {
193 "lsec_continue", -- Continue past certificate verification errors
194 "lsec_ignore_purpose", -- Validate client certificates as if they were server certificates
195 }; 191 };
196 curve = tls.features.algorithms.ec and not tls.features.capabilities.curves_list and "secp384r1"; 192 curve = tls.features.algorithms.ec and not tls.features.capabilities.curves_list and "secp384r1";
197 curveslist = { 193 curveslist = {
198 "X25519", 194 "X25519",
199 "P-384", 195 "P-384",