Custom client-cert verification during TLS handshake #7695
Replies: 3 comments 11 replies
-
One way to do this could be: restart the listeners with updated config by calling emqx_listener API from a plugin. No hooks. |
Beta Was this translation helpful? Give feedback.
-
Maybe better to have a different In emqx code, we always inject function this will allow callbacks to be plugable without having to restart the listeners |
Beta Was this translation helpful? Give feedback.
-
@MikeDombo, would you mind sharing your use case, what you want to achieve with custom
|
Beta Was this translation helpful? Give feedback.
-
Hello,
I see emqx's listeners are started before loading plugins/modules: link
Once started, is it possible to update a listener's configuration (e.g. SslOptions) afterwards?
The use-case I have in mind is to expose a hookpoint on TLS handshake (custom-certificate-verify), with a rough flow like this:
'tls.handshake.custom_verify'
hooks, gets the callback_action for the hook:mqtt:ssl
listener withverify_fun
option added in thessl_options
.Does this approach look good? Is it possible to update the
mqtt:ssl
listener's configuration (e.g. SslOptions) after we load plugins?EDIT:
I wonder if a plugin can call
emqx_listeners:update_listeners_env/2
function to havessl_options
updated formqtt:ssl
listener.Thanks!
Beta Was this translation helpful? Give feedback.
All reactions