فهرست منبع

feat(tls): update schema for TLS keyusage

William Yang 2 سال پیش
والد
کامیت
8eb463c58d
2فایلهای تغییر یافته به همراه14 افزوده شده و 0 حذف شده
  1. 8 0
      apps/emqx/src/emqx_schema.erl
  2. 6 0
      rel/i18n/emqx_schema.hocon

+ 8 - 0
apps/emqx/src/emqx_schema.erl

@@ -2117,6 +2117,14 @@ common_ssl_opts_schema(Defaults, Type) ->
                     desc => ?DESC(common_ssl_opts_schema_partial_chain)
                     desc => ?DESC(common_ssl_opts_schema_partial_chain)
                 }
                 }
             )},
             )},
+        {"verify_peer_ext_key_usage",
+            sc(
+                string(),
+                #{
+                    required => false,
+                    desc => ?DESC(common_ssl_opts_verify_peer_ext_key_usage)
+                }
+            )},
         {"reuse_sessions",
         {"reuse_sessions",
             sc(
             sc(
                 boolean(),
                 boolean(),

+ 6 - 0
rel/i18n/emqx_schema.hocon

@@ -684,6 +684,12 @@ common_ssl_opts_schema_partial_chain.desc:
 common_ssl_opts_schema_partial_chain.label:
 common_ssl_opts_schema_partial_chain.label:
 """Partial chain"""
 """Partial chain"""
 
 
+common_ssl_opts_verify_peer_ext_key_usage.desc:
+"""Verify Extended Key Usage in Peer's certificate"""
+
+common_ssl_opts_verify_peer_ext_key_usage.label:
+"""Verify KeyUsage in cert"""
+
 fields_listeners_ssl.desc:
 fields_listeners_ssl.desc:
 """SSL listeners."""
 """SSL listeners."""