-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 11/4/13 3:08 PM, Justin T Pryzby wrote: > On Mon, Nov 04, 2013 at 02:41:16PM -0800, Peter Saint-Andre wrote: >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >> >> Would someone in the jabberd2 community consider writing a brief >> howto about configuring jabberd2 so that it allows only encypted >> connections? Someone at the IETF meeting asked me about it just >> now and I didn't have any pointers for him. > If you mean in C2S: <id require-starttls='1'>. > > You can also set <ssl-port>5223</ssl-port>, which will naturally > reject anything that's not valid SSL (different from > xmpp+starttls).
Yes, I'm aware of the difference between SSL/TLS 5223 and STARTTLS on 5222, since I authored the XMPP RFCs. ;-) I am specifically interested in s2s, consistent with the encryption manifesto: https://github.com/stpeter/manifesto Thanks! Peter - -- Peter Saint-Andre https://stpeter.im/ -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.19 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSeCnOAAoJEOoGpJErxa2pQP4P/RFBcoUVLmGhs0uJma+huXmA gtEZgNq0UZ1qbMa0f9hg1+hFHGAyy1NqrnEqzU5uEOg8ttCb4JN+L2T2JC3HhsrO NQSMcn87ufxDBAF/FEhsfUK0IooeXZuv9Vb5SQxs6hx9A2Hwx3cO7T7PvDbPYBWd n0QEGmPRNFqvNpX4iqvjcx/mHbcCzrhWyuZWq7pj7261IOogHqEpREhHeWIGpASW /VlC0j/0a5M1ndlIpBqN4rqRYjqmZTN42YWEV7cCGUa9bPaT2Z71tChpQIeY6USw Y7j2ZOfN9tMFIkq3IC1sJrZVcUgmILScx/GYOz1prIIuu0srTGSTOwD1EmsSuToU Id/UQ80ExdbJx8OkPT1dCmcabeoh42z4VHpm7LTIVzgXu9m6H2GO9AmcmG/Dsowc DPwVm63q6fbAjUfUgRPzCaIC0GG3al15siWtKYJ3x/cLYVSTPizhizAoCaR6A5p/ SR3rwChUMMA/XOrV3/JjFWsnV+pA816SmPTLKbiwDI5+lCXsR6kigk64BzDVXu6g kc5V2p0fi7gi9CxPt8sCoDDRxEfwWTCNV+4yrS4aeZEKQgCOVjjQ/Xe6fbO3q3xF n+qPl1S4bjSxoEavo0ZxBz9XxbwkayLGYv73v76/d/C9cKPmZV7hisOAKBuXCjTQ ab9Y+bYC9XXG0P841hLH =sYlj -----END PGP SIGNATURE-----
