{"action":"created","issue":{"url":"https://api.github.com/repos/processone/ejabberd/issues/871","repository_url":"https://api.github.com/repos/processone/ejabberd","labels_url":"https://api.github.com/repos/processone/ejabberd/issues/871/labels{/name}","comments_url":"https://api.github.com/repos/processone/ejabberd/issues/871/comments","events_url":"https://api.github.com/repos/processone/ejabberd/issues/871/events","html_url":"https://github.com/processone/ejabberd/issues/871","id":121682757,"number":871,"title":"How to specify trusted CAs for s2s certificate verification?","user":{"login":"rfc2822","id":156167,"avatar_url":"https://avatars.githubusercontent.com/u/156167?v=3","gravatar_id":"","url":"https://api.github.com/users/rfc2822","html_url":"https://github.com/rfc2822","followers_url":"https://api.github.com/users/rfc2822/followers","following_url":"https://api.github.com/users/rfc2822/following{/other_user}","gists_url":"https://api.github.com/users/rfc2822/gists{/gist_id}","starred_url":"https://api.github.com/users/rfc2822/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rfc2822/subscriptions","organizations_url":"https://api.github.com/users/rfc2822/orgs","repos_url":"https://api.github.com/users/rfc2822/repos","events_url":"https://api.github.com/users/rfc2822/events{/privacy}","received_events_url":"https://api.github.com/users/rfc2822/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/processone/ejabberd/labels/Note:Needs%20more%20info","name":"Note:Needs more info","color":"c7def8"}],"state":"closed","locked":false,"assignee":{"login":"zinid","id":1095902,"avatar_url":"https://avatars.githubusercontent.com/u/1095902?v=3","gravatar_id":"","url":"https://api.github.com/users/zinid","html_url":"https://github.com/zinid","followers_url":"https://api.github.com/users/zinid/followers","following_url":"https://api.github.com/users/zinid/following{/other_user}","gists_url":"https://api.github.com/users/zinid/gists{/gist_id}","starred_url":"https://api.github.com/users/zinid/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zinid/subscriptions","organizations_url":"https://api.github.com/users/zinid/orgs","repos_url":"https://api.github.com/users/zinid/repos","events_url":"https://api.github.com/users/zinid/events{/privacy}","received_events_url":"https://api.github.com/users/zinid/received_events","type":"User","site_admin":false},"assignees":[{"login":"zinid","id":1095902,"avatar_url":"https://avatars.githubusercontent.com/u/1095902?v=3","gravatar_id":"","url":"https://api.github.com/users/zinid","html_url":"https://github.com/zinid","followers_url":"https://api.github.com/users/zinid/followers","following_url":"https://api.github.com/users/zinid/following{/other_user}","gists_url":"https://api.github.com/users/zinid/gists{/gist_id}","starred_url":"https://api.github.com/users/zinid/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zinid/subscriptions","organizations_url":"https://api.github.com/users/zinid/orgs","repos_url":"https://api.github.com/users/zinid/repos","events_url":"https://api.github.com/users/zinid/events{/privacy}","received_events_url":"https://api.github.com/users/zinid/received_events","type":"User","site_admin":false}],"milestone":null,"comments":2,"created_at":"2015-12-11T10:39:31Z","updated_at":"2016-06-29T09:37:11Z","closed_at":"2016-06-29T08:35:04Z","body":"How do you specify a list of CAs which are accepted by ejabberd? [FreeBSD's OpenSSL doesn't trust anybody by default](https://forums.freebsd.org/threads/openssl-etc-ssl-cert-pem-not-honoured-by-default.54176/), and if I understood that correctly, that behavior is by design and to choose a trusted CA list is an application-level thing. However, I couldn't find an option for that in ejabberd (in opposite to some other servers)… any advice?"},"comment":{"url":"https://api.github.com/repos/processone/ejabberd/issues/comments/229307316","html_url":"https://github.com/processone/ejabberd/issues/871#issuecomment-229307316","issue_url":"https://api.github.com/repos/processone/ejabberd/issues/871","id":229307316,"user":{"login":"rfc2822","id":156167,"avatar_url":"https://avatars.githubusercontent.com/u/156167?v=3","gravatar_id":"","url":"https://api.github.com/users/rfc2822","html_url":"https://github.com/rfc2822","followers_url":"https://api.github.com/users/rfc2822/followers","following_url":"https://api.github.com/users/rfc2822/following{/other_user}","gists_url":"https://api.github.com/users/rfc2822/gists{/gist_id}","starred_url":"https://api.github.com/users/rfc2822/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rfc2822/subscriptions","organizations_url":"https://api.github.com/users/rfc2822/orgs","repos_url":"https://api.github.com/users/rfc2822/repos","events_url":"https://api.github.com/users/rfc2822/events{/privacy}","received_events_url":"https://api.github.com/users/rfc2822/received_events","type":"User","site_admin":false},"created_at":"2016-06-29T09:37:11Z","updated_at":"2016-06-29T09:37:11Z","body":"> Configuring CA pool for openssl doesn't help? Because ejabberd relies on openssl configuration.\r\n\r\nAs far as I have understood, applications should provide a setting for the trusted CA storage because this OpenSSL setting is on application level."}}
{"actor":{"display_login":"rfc2822"}}