luasec-prosody was a (temporary) fork of LuaSec, with some features that are now merged into the official LuaSec and released in version 0.5 (see LuaSec bug #3). The real LuaSec is recommended if it is available in your distribution, if not, our fork can still be used.
The new features include support for:
- Certificate verification (needed to support certificate authentication for s2s connections)
- Perfect Forward Secrecy ciphers (DHE and ECDHE)
- APIs that allow channel binding (e.g. the SCRAM-SHA-1-PLUS SASL mechanism)
- Controls over CRL checking
It is strongly recommended to use luasec-prosody or LuaSec 0.5 alongside Prosody 0.9+.
You can find it in our package repository as
You can download a tarball here: luasec-prosody-0.5.1.tar.gz.