From 6c4ec4588804f0f316bc5f1716c6a702f83f1bc9 Mon Sep 17 00:00:00 2001
From: Feng Lee <feng@emqtt.io>
Date: Fri, 16 Feb 2018 18:41:15 +0800
Subject: [PATCH] Add etc/ssl_dist.conf file to configure SSL distribution

---
 etc/ssl_dist.conf | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 etc/ssl_dist.conf

diff --git a/etc/ssl_dist.conf b/etc/ssl_dist.conf
new file mode 100644
index 000000000..acdf0aa67
--- /dev/null
+++ b/etc/ssl_dist.conf
@@ -0,0 +1,11 @@
+%% The options in the {server, Opts} tuple are used when calling ssl:ssl_accept/3,
+%% and the options in the {client, Opts} tuple are used when calling ssl:connect/4.
+%% 
+%% More information at: http://erlang.org/doc/apps/ssl/ssl_distribution.html
+[{server,
+  [{certfile, "{{ platform_etc_dir }}/certs/cert.pem"},
+   {keyfile, "{{ platform_etc_dir }}/certs/key.pem"},
+   {secure_renegotiate, true},
+   {depth, 0}]},
+ {client,
+  [{secure_renegotiate, true}]}].