Compare commits

...

2 Commits

Author SHA1 Message Date
renovate[bot] 58141f9926 chore(deps): update dependency tabulate to v0.10.0 2026-03-05 14:07:03 +02:00
mikhail.sarnov 1ee5c1f416 feat(synapse): add ca_certs_file support for LDAP TLS
Add matrix_synapse_ext_password_provider_ldap_tls_options_ca_certs_file
variable to allow specifying a custom CA certificate file for LDAP TLS
verification. Useful when Synapse is running in a container that does not
trust a private/internal CA by default.

Example usage:
matrix_synapse_ext_password_provider_ldap_tls_options_ca_certs_file: /etc/ssl/certs/my-ca.crt
2026-03-05 14:06:52 +02:00
3 changed files with 5 additions and 1 deletions
+1 -1
View File
@@ -28,6 +28,6 @@ sphinxcontrib-htmlhelp==2.1.0
sphinxcontrib-jsmath==1.0.1 sphinxcontrib-jsmath==1.0.1
sphinxcontrib-qthelp==2.0.0 sphinxcontrib-qthelp==2.0.0
sphinxcontrib-serializinghtml==2.0.0 sphinxcontrib-serializinghtml==2.0.0
tabulate==0.9.0 tabulate==0.10.0
uc-micro-py==2.0.0 uc-micro-py==2.0.0
urllib3==2.6.3 urllib3==2.6.3
@@ -1410,6 +1410,7 @@ matrix_synapse_ext_password_provider_ldap_filter: ""
matrix_synapse_ext_password_provider_ldap_active_directory: false matrix_synapse_ext_password_provider_ldap_active_directory: false
matrix_synapse_ext_password_provider_ldap_default_domain: "" matrix_synapse_ext_password_provider_ldap_default_domain: ""
matrix_synapse_ext_password_provider_ldap_tls_options_validate: true matrix_synapse_ext_password_provider_ldap_tls_options_validate: true
matrix_synapse_ext_password_provider_ldap_tls_options_ca_certs_file: ""
# Enable this to activate the Synapse Antispam spam-checker module. # Enable this to activate the Synapse Antispam spam-checker module.
# See: https://github.com/t2bot/synapse-simple-antispam # See: https://github.com/t2bot/synapse-simple-antispam
@@ -2540,6 +2540,9 @@ password_providers:
filter: {{ matrix_synapse_ext_password_provider_ldap_filter | string|to_json }} filter: {{ matrix_synapse_ext_password_provider_ldap_filter | string|to_json }}
tls_options: tls_options:
validate: {{ matrix_synapse_ext_password_provider_ldap_tls_options_validate | to_json }} validate: {{ matrix_synapse_ext_password_provider_ldap_tls_options_validate | to_json }}
{% if matrix_synapse_ext_password_provider_ldap_tls_options_ca_certs_file %}
ca_certs_file: {{ matrix_synapse_ext_password_provider_ldap_tls_options_ca_certs_file | string | to_json }}
{% endif %}
{% endif %} {% endif %}
{% endif %} {% endif %}