prosody-modules
f5d78bc016a6
mod_s2s_auth_dane/mod_s2s_auth_dane.lua

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody-modules

Log

mod_s2s_auth_dane/mod_s2s_auth_dane.lua @ 2092:f5d78bc016a6

less more | (0) -60 tip
description author age
mod_s2s_auth_dane: Correct message about not being able to support SPKI Kim Alvefur Sun, 31 Jan 2016 12:38:51 +0100
mod_s2s_auth_dane: Check if cert:pubkey() is available Kim Alvefur Sat, 23 Jan 2016 20:34:26 +0100
mod_s2s_auth_dane: Warn only if there enabled uses that can't be supported Kim Alvefur Mon, 11 Jan 2016 15:45:09 +0100
mod_s2s_auth_dane: More DNS related debug logging Kim Alvefur Sat, 12 Dec 2015 17:00:25 +0100
mod_s2s_auth_dane: Abort on bogus reply to SRV lookup Kim Alvefur Sat, 12 Dec 2015 16:59:49 +0100
mod_s2s_auth_dane: Log as much as possible through session logger instance Kim Alvefur Sat, 12 Dec 2015 16:01:58 +0100
mod_s2s_auth_dane: Add a telnet console command that exposes DANE information Kim Alvefur Thu, 10 Dec 2015 23:24:55 +0100
mod_s2s_auth_dane: Keep DANE response around after the connection is established to aid in debugging Kim Alvefur Thu, 10 Dec 2015 23:24:11 +0100
mod_s2s_auth_dane: Some more verbose debug logging Kim Alvefur Thu, 10 Dec 2015 23:23:07 +0100
mod_s2s_auth_dane: Consider TLSA records with PKIX uses as supported (if enabled) even if the chain is invalid (if no match is found the session is considered insecure) Kim Alvefur Mon, 16 Nov 2015 18:03:41 +0100
mod_s2s_auth_dane: Consider the current certificate chain status before checking PKIX-{EE,CA} TLSA records Kim Alvefur Thu, 05 Nov 2015 15:38:31 +0100
mod_s2s_auth_dane: Support servers without SRV records by falling back to port 5269 and the bare hostname for TLSA lookups Kim Alvefur Thu, 05 Nov 2015 14:10:11 +0100
mod_s2s_auth_dane: Ignore mutating of the 'module' global, that is ok in prosody plugins [luacheck] Kim Alvefur Thu, 21 May 2015 11:14:16 +0200
mod_s2s_auth_dane: Validate names of DANE-TA certs Kim Alvefur Thu, 21 May 2015 10:28:02 +0200
mod_s2s_auth_dane: Simplify cases where there are only one SRV record Kim Alvefur Wed, 06 May 2015 00:53:27 +0200
mod_s2s_auth_dane: Don't count number of RRs in DNS reply if the DNS lib already did Kim Alvefur Wed, 06 May 2015 00:51:46 +0200
mod_s2s_auth_dane: Abort earlier for sessions from hosts that don't say who they are Kim Alvefur Mon, 13 Apr 2015 13:36:38 +0200
mod_s2s_auth_dane: Demote log message about failure to ASCII-ify hostname from error to warning Kim Alvefur Mon, 13 Apr 2015 13:35:37 +0200
mod_s2s_auth_dane: Cleanup [luacheck] Kim Alvefur Tue, 07 Apr 2015 17:35:20 +0200
mod_s2s_auth_dane: Update for recent changes in Zashs LuaSec branch Kim Alvefur Tue, 31 Mar 2015 20:57:34 +0200
mod_s2s_auth_dane: Comments and cleanup Kim Alvefur Mon, 16 Mar 2015 16:19:53 +0100
mod_s2s_auth_dane: Include hostname when logging a failure Kim Alvefur Tue, 16 Sep 2014 19:55:54 +0200
mod_s2s_auth_dane: Fix stringprepping when doing "DANE Light" Kim Alvefur Tue, 16 Sep 2014 19:53:41 +0200
mod_s2s_auth_dane: Fix traceback caused by LuaSec not being loaded Kim Alvefur Sun, 14 Sep 2014 18:52:54 +0200
mod_s2s_auth_dane: Tweak log messages Kim Alvefur Sun, 15 Jun 2014 02:40:18 +0200
mod_s2s_auth_dane: Add some more info to log messages Kim Alvefur Fri, 13 Jun 2014 02:19:52 +0200
mod_s2s_auth_dane: Pause connection only if needed Kim Alvefur Thu, 12 Jun 2014 12:31:50 +0200
mod_s2s_auth_dane: Return if no certificate found Kim Alvefur Thu, 12 Jun 2014 12:30:39 +0200
mod_s2s_auth_dane: Cache logger to save some table lookups and improve readability Kim Alvefur Wed, 11 Jun 2014 12:50:57 +0200
mod_s2s_auth_dane: Fix potential traceback in logging if SRV target fails nameprep Kim Alvefur Mon, 19 May 2014 17:00:12 +0200
mod_s2s_auth_dane: Unreference DNS lookup when reply arrives (thanks LordVan) Kim Alvefur Mon, 19 May 2014 16:28:43 +0200
Backout 33f132c3f4b7 until 0.10 Kim Alvefur Thu, 15 May 2014 11:12:31 +0200
mod_s2s_auth_dane: Fix traceback if session.srv_hosts is nil Kim Alvefur Thu, 08 May 2014 15:43:58 +0200
mod_s2s_auth_dane: Change how TLSA support is detected Kim Alvefur Wed, 07 May 2014 17:08:47 +0200
mod_s2s_auth_dane: Fix logic precedence issue Kim Alvefur Wed, 07 May 2014 17:07:10 +0200
mod_s2s_auth_dane: Add support for DANE-TA and PKIX-CA (requires LuaSec changes) Kim Alvefur Sun, 27 Apr 2014 01:43:43 +0200
mod_s2s_auth_dane: Use PEM to DER function from util.x509 (0.10+) Kim Alvefur Sun, 27 Apr 2014 01:40:20 +0200
mod_s2s_auth_dane: Launch DANE queries when sending or receiving stream-features instead of monkeypatching s2sout.lib Kim Alvefur Sun, 27 Apr 2014 01:24:03 +0200
mod_s2s_auth_dane: Clean up no longer needed DNS replies Kim Alvefur Thu, 24 Apr 2014 18:34:10 +0200
mod_s2s_auth_dane: Skip dns queries for already authenticated s2sin connections Kim Alvefur Thu, 24 Apr 2014 18:33:13 +0200
mod_s2s_auth_dane: Remove non-working bogus handling Kim Alvefur Thu, 24 Apr 2014 18:32:25 +0200
mod_s2s_auth_dane: Break out DANE check into a function Kim Alvefur Thu, 24 Apr 2014 18:19:09 +0200
mod_s2s_auth_dane: Improve debug message and log it on the session Kim Alvefur Thu, 10 Apr 2014 22:40:11 +0200
mod_s2s_auth_dane: Merge functionality from mod_s2s_auth_dnssec_srv Kim Alvefur Mon, 24 Mar 2014 13:04:24 +0100
mod_s2s_auth_dane: Fix typo in debug statement Kim Alvefur Thu, 20 Mar 2014 15:55:37 +0100
mod_s2s_auth_dane: Pause s2sin while doing SRV and TLSA lookups, fixes race condition (Can haz util.async plz) Kim Alvefur Thu, 20 Mar 2014 15:31:15 +0100
mod_s2s_auth_dane: Fix tb when no hostname sent by remote Kim Alvefur Wed, 19 Mar 2014 19:48:06 +0100
mod_s2s_auth_dane: Verify that the SRV is secure Kim Alvefur Wed, 19 Mar 2014 14:33:10 +0100
mod_s2s_auth_dane: Abort module loading if luaunbound is unavailable Kim Alvefur Wed, 19 Mar 2014 14:04:09 +0100
mod_s2s_auth_dane: Drop support for domains without SRV for now Kim Alvefur Tue, 18 Mar 2014 16:09:51 +0100
mod_s2s_auth_dane: Fix for a17c2c4043e5 Kim Alvefur Tue, 18 Mar 2014 16:02:24 +0100
mod_s2s_auth_dane: Skip TLSA lookups if SRV is insecure Kim Alvefur Tue, 18 Mar 2014 15:54:08 +0100
mod_s2s_auth_dane: Hack for domains without SRV Kim Alvefur Tue, 18 Mar 2014 15:36:23 +0100
mod_s2s_auth_dane: Don't pass nil to hash functions in case of unsupported selectors Kim Alvefur Tue, 18 Mar 2014 15:20:28 +0100
mod_s2s_auth_dane: Back to _port._tcp.srvtarget.example.net Kim Alvefur Tue, 18 Mar 2014 15:12:11 +0100
mod_s2s_auth_dane: Bogus replies should have no RRdata Kim Alvefur Fri, 14 Mar 2014 14:30:33 +0100
mod_s2s_auth_dane: Comments and TODOs Kim Alvefur Fri, 14 Mar 2014 14:23:27 +0100
mod_s2s_auth_dane: Make supported DANE usages configurable, default to DANE-EE Kim Alvefur Fri, 14 Mar 2014 14:18:18 +0100
mod_s2s_auth_dane: Simplify, but diverge from DANE-SRV draft. Will now look for _xmpp-server.example.com IN TLSA for both directions Kim Alvefur Fri, 14 Mar 2014 14:15:56 +0100
mod_s2s_auth_dane: Only invalidate trust if we found any supported DANE records Kim Alvefur Tue, 11 Mar 2014 21:13:40 +0100
less more | (0) -60 tip