Let 'domain_certfile' take higher precedence

If a 'domain_certfile' is specified, use that instead of the
's2s_certfile' (or 'c2s_certfile').
This commit is contained in:
Holger Weiss 2017-08-13 20:31:03 +02:00
parent 63aabed320
commit 64150cc7c5
2 changed files with 4 additions and 4 deletions

View File

@ -303,9 +303,9 @@ tls_options(#{lserver := LServer, tls_options := DefaultOpts,
{true, CertFile} when CertFile /= undefined -> DefaultOpts;
{_, _} ->
case ejabberd_config:get_option(
{c2s_certfile, LServer},
{domain_certfile, LServer},
ejabberd_config:get_option(
{domain_certfile, LServer})) of
{c2s_certfile, LServer})) of
undefined -> DefaultOpts;
CertFile -> lists:keystore(certfile, 1, DefaultOpts,
{certfile, CertFile})

View File

@ -199,9 +199,9 @@ dirty_get_connections() ->
-spec tls_options(binary(), [proplists:property()]) -> [proplists:property()].
tls_options(LServer, DefaultOpts) ->
TLSOpts1 = case ejabberd_config:get_option(
{s2s_certfile, LServer},
{domain_certfile, LServer},
ejabberd_config:get_option(
{domain_certfile, LServer})) of
{s2s_certfile, LServer})) of
undefined -> DefaultOpts;
CertFile -> lists:keystore(certfile, 1, DefaultOpts,
{certfile, CertFile})