Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Commit

Permalink
Request keys directly from federated servers instead
Browse files Browse the repository at this point in the history
There's no reason to set a trusted key server in a private federation demo setup
  • Loading branch information
anoadragon453 committed May 3, 2023
1 parent 4a1a0ad commit c8d0f97
Showing 1 changed file with 2 additions and 9 deletions.
11 changes: 2 additions & 9 deletions demo/start.sh
Original file line number Diff line number Diff line change
Expand Up @@ -80,15 +80,8 @@ for port in 8080 8081 8082; do
echo "tls_certificate_path: \"$DIR/$port/localhost:$port.tls.crt\""
echo "tls_private_key_path: \"$DIR/$port/localhost:$port.tls.key\""

# Ignore keys from the trusted keys server
echo '# Ignore keys from the trusted keys server.'
echo '# Specifically, we do this by omitting the "verify_keys" option'
echo '# and enabling "accept_keys_insecurely"'
echo 'trusted_key_servers:'
echo ' - server_name: "matrix.org"'
echo ' accept_keys_insecurely: true'
echo 'suppress_key_server_warning: true'
echo ''
# Request keys directly from servers contacted over federation
echo 'trusted_key_servers: []'

# Allow the servers to communicate over localhost.
allow_list=$(cat <<-ALLOW_LIST
Expand Down

0 comments on commit c8d0f97

Please sign in to comment.