|
@@ -638,7 +638,7 @@ function xmpp_create_config {
|
638
|
638
|
echo 'https_ports = { 5281 }' >> /etc/prosody/prosody.cfg.lua
|
639
|
639
|
echo 'https_interfaces = { "*" }' >> /etc/prosody/prosody.cfg.lua
|
640
|
640
|
echo 'https_ssl = {' >> /etc/prosody/prosody.cfg.lua
|
641
|
|
- if [ -f /etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
|
|
641
|
+ if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
|
642
|
642
|
echo " certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem\";" >> /etc/prosody/prosody.cfg.lua
|
643
|
643
|
else
|
644
|
644
|
echo " certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.crt\";" >> /etc/prosody/prosody.cfg.lua
|
|
@@ -652,7 +652,7 @@ function xmpp_create_config {
|
652
|
652
|
echo '' >> /etc/prosody/prosody.cfg.lua
|
653
|
653
|
echo 'ssl = {' >> /etc/prosody/prosody.cfg.lua
|
654
|
654
|
echo " key = \"/etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key\";" >> /etc/prosody/prosody.cfg.lua
|
655
|
|
- if [ -f /etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
|
|
655
|
+ if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
|
656
|
656
|
echo " certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem\";" >> /etc/prosody/prosody.cfg.lua
|
657
|
657
|
else
|
658
|
658
|
echo " certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.crt\";" >> /etc/prosody/prosody.cfg.lua
|
|
@@ -686,17 +686,17 @@ function xmpp_create_config {
|
686
|
686
|
echo "VirtualHost \"${DEFAULT_DOMAIN_NAME}\"" >> /etc/prosody/prosody.cfg.lua
|
687
|
687
|
fi
|
688
|
688
|
echo ' ssl = {' >> /etc/prosody/prosody.cfg.lua
|
689
|
|
- echo " key = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.key\";" >> /etc/prosody/prosody.cfg.lua
|
690
|
|
- if [ -f /etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
|
691
|
|
- echo " certificate = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem\";" >> /etc/prosody/prosody.cfg.lua
|
|
689
|
+ echo " key = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.key\";" >> /etc/prosody/prosody.cfg.lua
|
|
690
|
+ if [ -f /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem ]; then
|
|
691
|
+ echo " certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem\";" >> /etc/prosody/prosody.cfg.lua
|
692
|
692
|
else
|
693
|
|
- echo " certificate = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.crt\";" >> /etc/prosody/prosody.cfg.lua
|
|
693
|
+ echo " certificate = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.crt\";" >> /etc/prosody/prosody.cfg.lua
|
694
|
694
|
fi
|
695
|
695
|
echo " curve = $XMPP_ECC_CURVE;" >> /etc/prosody/prosody.cfg.lua
|
696
|
696
|
echo ' depth = "2";' >> /etc/prosody/prosody.cfg.lua
|
697
|
697
|
echo " ciphers = $XMPP_CIPHERS;" >> /etc/prosody/prosody.cfg.lua
|
698
|
698
|
echo ' options = {"no_sslv2", "no_sslv3" };' >> /etc/prosody/prosody.cfg.lua
|
699
|
|
- echo " dhparam = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" >> /etc/prosody/prosody.cfg.lua
|
|
699
|
+ echo " dhparam = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" >> /etc/prosody/prosody.cfg.lua
|
700
|
700
|
echo ' }' >> /etc/prosody/prosody.cfg.lua
|
701
|
701
|
echo '' >> /etc/prosody/prosody.cfg.lua
|
702
|
702
|
echo 'Include "conf.d/*.cfg.lua"' >> /etc/prosody/prosody.cfg.lua
|
|
@@ -841,22 +841,19 @@ function install_xmpp {
|
841
|
841
|
chown root:default /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.*
|
842
|
842
|
|
843
|
843
|
cp -a /etc/prosody/conf.avail/example.com.cfg.lua /etc/prosody/conf.avail/xmpp.cfg.lua
|
844
|
|
- if [ ! -d /etc/prosody/certs ]; then
|
845
|
|
- mkdir /etc/prosody/certs
|
846
|
|
- fi
|
847
|
844
|
|
848
|
845
|
if [[ "$(cert_exists ${DEFAULT_DOMAIN_NAME} pem)" == "1" ]]; then
|
849
|
|
- sed -i "s|/etc/prosody/certs/example.com.key|/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.key|g" /etc/prosody/conf.avail/xmpp.cfg.lua
|
850
|
|
- sed -i "s|/etc/prosody/certs/example.com.crt|/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.pem|g" /etc/prosody/conf.avail/xmpp.cfg.lua
|
|
846
|
+ sed -i "s|key =.*|key = /etc/ssl/private/${DEFAULT_DOMAIN_NAME}.key|g" /etc/prosody/conf.avail/xmpp.cfg.lua
|
|
847
|
+ sed -i "s|certificate =.*|certificate = /etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.pem|g" /etc/prosody/conf.avail/xmpp.cfg.lua
|
851
|
848
|
else
|
852
|
|
- sed -i 's|/etc/prosody/certs/example.com.key|/etc/prosody/certs/xmpp.key|g' /etc/prosody/conf.avail/xmpp.cfg.lua
|
853
|
|
- sed -i 's|/etc/prosody/certs/example.com.crt|/etc/prosody/certs/xmpp.crt|g' /etc/prosody/conf.avail/xmpp.cfg.lua
|
|
849
|
+ sed -i "s|key =.*|key = /etc/ssl/privates/xmpp.key|g" /etc/prosody/conf.avail/xmpp.cfg.lua
|
|
850
|
+ sed -i "s|certificate =.*|certificate = /etc/ssl/certs/xmpp.crt|g" /etc/prosody/conf.avail/xmpp.cfg.lua
|
854
|
851
|
fi
|
855
|
852
|
if ! grep -q "xmpp.dhparam" /etc/prosody/conf.avail/xmpp.cfg.lua; then
|
856
|
853
|
if [[ "$(cert_exists ${DEFAULT_DOMAIN_NAME})" == "1" ]]; then
|
857
|
|
- sed -i "/certificate =/a\ dhparam = \"/etc/prosody/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" /etc/prosody/conf.avail/xmpp.cfg.lua
|
|
854
|
+ sed -i "/certificate =/a\ dhparam = \"/etc/ssl/certs/${DEFAULT_DOMAIN_NAME}.dhparam\";" /etc/prosody/conf.avail/xmpp.cfg.lua
|
858
|
855
|
else
|
859
|
|
- sed -i '/certificate =/a\ dhparam = "/etc/prosody/certs/xmpp.dhparam";' /etc/prosody/conf.avail/xmpp.cfg.lua
|
|
856
|
+ sed -i '/certificate =/a\ dhparam = "/etc/ssl/certs/xmpp.dhparam";' /etc/prosody/conf.avail/xmpp.cfg.lua
|
860
|
857
|
fi
|
861
|
858
|
fi
|
862
|
859
|
if ! grep -q 'options = {"no_sslv2", "no_sslv3" }' /etc/prosody/conf.avail/xmpp.cfg.lua; then
|
|
@@ -935,8 +932,6 @@ function install_xmpp {
|
935
|
932
|
configure_firewall_for_xmpp
|
936
|
933
|
xmpp_email_headers
|
937
|
934
|
|
938
|
|
- cp /etc/ssl/certs/xmpp.* /etc/prosody/certs
|
939
|
|
- cp /etc/ssl/private/xmpp.* /etc/prosody/certs
|
940
|
935
|
update_default_domain
|
941
|
936
|
|
942
|
937
|
xmpp_create_config
|