File

core.certmanager: Include ffdhe2048 from RFC 7919 as default DH param This removes one manual (yet undocumented) step that was supposed to be done to get a complete 'intermediate' configuration. This file can be found on the Internet by searching for "ffdhe2048" and can be verified by comparing the hexadecimal representation of p from the RFC with the output of `openssl asn1parse`. Given the preference and prevalence of ECDHE, it seems likely that few would have noticed this.

#!/bin/sh -eu

wget -N https://xmpp.org/extensions/xeplist.xml
xml2 <xeplist.xml |
	2csv xep-infos/xep number version |
	grep -v ^xxxx,|
	sort -g > xepinfos.csv

xml2 < doc/doap.xml |
	2csv -d '	' xmpp:SupportedXep @rdf:resource xmpp:version |
	sed -r 's/https?:\/\/xmpp\.org\/extensions\/xep-0*([1-9][0-9]*)\.html/\1/' |
	while read -r xep ver ; do
		grep "^$xep," xepinfos.csv | awk -F, "\$2 != \"$ver\" { print (\"XEP-\"\$1\" updated to \"\$2\" from $ver\") }"
	done