mirror of
https://github.com/opensim/opensim.git
synced 2026-08-11 20:05:33 +08:00
Implementation of a basic PEM encoded to OpenSim compatible PKCS12 certificates converter.
As you know most CAs return PEM encoded certificates and require a conversion using OpenSSL to make them compatible with OpenSim. This implementation does the automatic conversion from .pem to .p12 and .pfx at OpenSim startup which updates the certificate in case of automatic certificates renewal... Note: still under testing using certbot and Let's Encrypt certs... Thank you and good continuaion Web Rain :)
This commit is contained in:
@@ -399,6 +399,33 @@
|
||||
; routing and land at the landmark coordinates when set to true
|
||||
; default is false
|
||||
; TelehubAllowLandmark = false
|
||||
|
||||
; #
|
||||
; # Let's Encrypt and others ".pem" certificates converter settings.
|
||||
; #
|
||||
|
||||
;; Enabling this feature will automatically convert the CA .pem certificates to
|
||||
;; OpenSim compatible PKCS12 .p12 and .pfx certificates on every server startup.
|
||||
;; The resulting certificates are stored in the bin\SSL\ssl folder.
|
||||
;# {EnableCertConverter} {} {Enable pem to pkcs12 certificates converter} {true false} false
|
||||
EnableCertConverter = false
|
||||
|
||||
;; Set the absolute path of the "fullchain.pem". If your CA don't provide this file,
|
||||
;; you can use the "cert.pem" instead.
|
||||
;# {PemCertPublicKey} {} {Set the path of the public key .pem} {} ""
|
||||
PemCertPublicKey = ""
|
||||
|
||||
;; Set the absolute path of the pem private key "privkey.pem".
|
||||
;# {PemCertPrivateKey} {} {Set the path of the private key .pem} {} ""
|
||||
PemCertPrivateKey = ""
|
||||
|
||||
;; Set the name of the resulting .p12 and .pfx.
|
||||
;# {outputCertName} {} {Set the name of the resulting .p12 and .pfx} {} "letsencrypt"
|
||||
outputCertName = "letsencrypt"
|
||||
|
||||
;; Set the .p12 and .pfx password.
|
||||
;# {outputCertPassword} {} {Set the .p12 and .pfx password} {} ""
|
||||
outputCertPassword = ""
|
||||
|
||||
; #
|
||||
; # SSL selfsigned certificate settings.
|
||||
|
||||
Reference in New Issue
Block a user