2 Commits

Author SHA1 Message Date
renovate[bot]
58141f9926 chore(deps): update dependency tabulate to v0.10.0 2026-03-05 14:07:03 +02:00
mikhail.sarnov
1ee5c1f416 feat(synapse): add ca_certs_file support for LDAP TLS
Add matrix_synapse_ext_password_provider_ldap_tls_options_ca_certs_file
variable to allow specifying a custom CA certificate file for LDAP TLS
verification. Useful when Synapse is running in a container that does not
trust a private/internal CA by default.

Example usage:
matrix_synapse_ext_password_provider_ldap_tls_options_ca_certs_file: /etc/ssl/certs/my-ca.crt
2026-03-05 14:06:52 +02:00
3 changed files with 5 additions and 1 deletions

View File

@@ -28,6 +28,6 @@ sphinxcontrib-htmlhelp==2.1.0
sphinxcontrib-jsmath==1.0.1
sphinxcontrib-qthelp==2.0.0
sphinxcontrib-serializinghtml==2.0.0
tabulate==0.9.0
tabulate==0.10.0
uc-micro-py==2.0.0
urllib3==2.6.3

View File

@@ -1410,6 +1410,7 @@ matrix_synapse_ext_password_provider_ldap_filter: ""
matrix_synapse_ext_password_provider_ldap_active_directory: false
matrix_synapse_ext_password_provider_ldap_default_domain: ""
matrix_synapse_ext_password_provider_ldap_tls_options_validate: true
matrix_synapse_ext_password_provider_ldap_tls_options_ca_certs_file: ""
# Enable this to activate the Synapse Antispam spam-checker module.
# See: https://github.com/t2bot/synapse-simple-antispam

View File

@@ -2540,6 +2540,9 @@ password_providers:
filter: {{ matrix_synapse_ext_password_provider_ldap_filter | string|to_json }}
tls_options:
validate: {{ matrix_synapse_ext_password_provider_ldap_tls_options_validate | to_json }}
{% if matrix_synapse_ext_password_provider_ldap_tls_options_ca_certs_file %}
ca_certs_file: {{ matrix_synapse_ext_password_provider_ldap_tls_options_ca_certs_file | string | to_json }}
{% endif %}
{% endif %}
{% endif %}