mirror of
https://github.com/getnamingo/registry.git
synced 2025-08-22 17:10:48 +02:00
A few improvements to EPP
This commit is contained in:
parent
14ab775dca
commit
2f86a543ff
2 changed files with 60 additions and 15 deletions
50
docs/gtld.md
50
docs/gtld.md
|
@ -359,7 +359,7 @@ php icann_mosapi.php
|
|||
|
||||
## 11. ICANN RST
|
||||
|
||||
### 11.1. EPP Server Startup Options
|
||||
### 11.1. EPP Server Startup
|
||||
|
||||
Two launch variants are available:
|
||||
|
||||
|
@ -392,4 +392,50 @@ Two launch variants are available:
|
|||
|
||||
After this, your server will be running the RST-compatible implementation under the default name.
|
||||
|
||||
Both versions share the same logic and configuration. Choose based on your integration requirements.
|
||||
Both versions share the same logic and configuration. Choose based on your integration requirements.
|
||||
|
||||
### 11.2. EPP Server Configuration
|
||||
|
||||
#### 11.2.1. Modify `/opt/registry/epp/extensions.json`
|
||||
|
||||
Ensure the following EPP extensions are **disabled** (i.e., `"enabled": false`) or **enabled** where noted:
|
||||
|
||||
```json
|
||||
{
|
||||
"urn:ietf:params:xml:ns:epp:loginSec-1.0": {
|
||||
"enabled": false
|
||||
},
|
||||
"urn:ietf:params:xml:ns:epp:unhandled-namespaces-1.0": {
|
||||
"enabled": false
|
||||
},
|
||||
"urn:ietf:params:xml:ns:epp:secure-authinfo-transfer-1.0": {
|
||||
"enabled": false
|
||||
},
|
||||
...
|
||||
"urn:ietf:params:xml:ns:mark-1.0": {
|
||||
"enabled": false
|
||||
},
|
||||
"https://namingo.org/epp/funds-1.0": {
|
||||
"enabled": false
|
||||
},
|
||||
"https://namingo.org/epp/identica-1.0": {
|
||||
"enabled": false
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
#### 11.2.2. Modify `/opt/registry/epp/config.php`
|
||||
|
||||
Ensure the following configuration options are present and set to `true`. If the keys do not exist, add them:
|
||||
|
||||
```php
|
||||
<?php
|
||||
...
|
||||
// Enforce TLS client certificate validation
|
||||
'mandatory_client_ssl' => true,
|
||||
|
||||
// Disable the 60-day inter-registrar transfer lock
|
||||
'disable_60days' => true,
|
||||
|
||||
];
|
||||
```
|
Loading…
Add table
Add a link
Reference in a new issue