Basic implementation of SSL selfsigned certificates creation and renewal

Allows selfsigned certificates creation and renewal for local and external use. When enabled, will create a folder SSL\ and 2 sub folders SSL\ssl\ and SSL\src\. Next creates and store an RSA private key in SSL\src\ and the derived selfsigned certificates in SSL\ssl\ folder. Is also possible to renew the certificate on every server restart if CertRenewOnStartup is set to true.

Note: The SSL related params in the network section was adapted to be user friendly and allow the usage just by uncommenting the SSL params in both sections and a password change.
This commit is contained in:
Adil El Farissi
2024-03-20 01:12:49 +00:00
committed by UbitUmarov
parent e2b655a939
commit c2c3ca418a
5 changed files with 142 additions and 11 deletions

View File

@@ -399,6 +399,29 @@
; routing and land at the landmark coordinates when set to true
; default is false
; TelehubAllowLandmark = false
; #
; # SSL selfsigned certificate settings.
; #
; Enable selfsigned certificate creation for local and external use. When set to true, will create a folder SSL\ and 2 sub folders SSL\ssl\ and SSL\src\. Next creates and store an RSA private key in SSL\src\ and the derived selfsigned certificate in SSL\ssl\ folder. Is also possible to renew the certificate on every server restart if CertRenewOnStartup is set to true.
EnbleSelfsignedCertSupport = false
; Is free... so why not :). Renew the selfsigned certificate on every server startup ?
;CertRenewOnStartup = true
; # Certificate options:
; Set the certificate file name. the output files extensions are CertFileName.p12 and CertFileName.pfx.
;CertFileName = "OpenSim"
; Set the certificate password.
;CertPassword = "mycertpass"
; The certificate host name (domain or IP of this machine CN).
;CertHostName = ${Const|BaseHostname}
; The certificate host IP (IP of this machine).
;CertHostIp = "127.0.0.1"
; #
; # SSL certificates validation options