1 #summary Warn admins about outgoing s2s connections that are refused due to invalid or untrusted certificates

     2 #labels Stage-Alpha

     3 

     4 = Introduction =

     5 

     6 Similar to mod_watchregistrations, this module warns admins when an s2s connection fails due for encryption or trust reasons.

     7 

     8 The certificate shows the SHA1 hash, so it can easily be used together with mod_s2s_auth_fingerprint.

     9 

    10 = Configuration =

    11 

    12 {{{

    13 modules_enabled = {

    14 	-- other modules --

    15 	"watchuntrusted",

    16 

    17 }

    18 

    19 untrusted_fail_watchers = { "admin@example.lit" }

    20 untrusted_fail_notification = "Establishing a secure connection from $from_host to $to_host failed. Certificate hash: $sha1. $errors"

    21 }}}

    22 

    23 || *Option*                          || *Default* || *Description* ||

    24 || untrusted_fail_watchers || All admins      || The users to send the message to ||

    25 || untrusted_fail_notification         || "Establishing a secure connection from $from_host to $to_host failed. Certificate hash: $sha1. $errors"      || The message to send, $from_host, $to_host, $sha1 and $errors are replaced  ||

    26 

    27 

    28 = Compatibility =

    29 

    30 ||trunk||Works||