Mercurial > ~mikael > mcabber > hg
comparison mcabber/mcabberrc.example @ 2246:3d266140a8fb
Add ssl_ciphers and ssl_ca option in mcabberrc.example
author | franky |
---|---|
date | Wed, 10 Feb 2016 23:08:44 +0100 |
parents | 41e897b79c8d |
children | 377b6a52b25f |
comparison
equal
deleted
inserted
replaced
2245:bcb7bfa1cd09 | 2246:3d266140a8fb |
---|---|
46 # You can require TLS by setting tls to 1. If your jabber server | 46 # You can require TLS by setting tls to 1. If your jabber server |
47 # still doesn't support TLS, you can use the old-style SSL by setting | 47 # still doesn't support TLS, you can use the old-style SSL by setting |
48 # ssl to 1. It's not possible to use old-style SSL and TLS together. | 48 # ssl to 1. It's not possible to use old-style SSL and TLS together. |
49 #set ssl = 0 | 49 #set ssl = 0 |
50 set tls = 1 | 50 set tls = 1 |
51 # It is possible to set the allowed ciphers which openssl/gnutls can use for | |
52 # the encrypted connection. | |
53 # openssl (get the name of the available ciphers via 'openssl ciphers'): | |
54 #set ssl_ciphers = ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384 | |
55 # gnutls (check the priorities option of 'man gnutls_priority_init'): | |
56 #set ssl_ciphers = PFS | |
57 # If you'd like to explicitly specify trusted certificates, set the ssl_ca | |
58 # option to a certificate file or path. | |
59 #set ssl_ca = ~/.mcabber/trusted_cert.pem | |
51 # Moreover, it's possible to check whether the fingerprint of the | 60 # Moreover, it's possible to check whether the fingerprint of the |
52 # ssl certificate matches ssl_fingerprint. | 61 # ssl certificate matches ssl_fingerprint. |
53 # You can get the fingerprint of your server either with gnutls or openssl: | 62 # You can get the fingerprint of your server either with gnutls or openssl: |
54 # 1. gnutls-cli -p 5223 $your_server | 63 # 1. gnutls-cli -p 5223 $your_server |
55 # 2. openssl s_client -connect $your_server:5223 | \ | 64 # 2. openssl s_client -connect $your_server:5223 | \ |