|
Back out 1b0ac7950129, as SSLv3 appears to still be in moderate use on the network. Also, although obsolete, SSLv3 isn't documented to have any weaknesses that TLS 1.0 (the most common version used today) doesn't also have. Get your act together clients!
|
Matthew Wild |
Tue, 12 Nov 2013 02:13:01 +0000 |
|
Merge 0.10->trunk
|
Kim Alvefur |
Mon, 11 Nov 2013 23:28:53 +0100 |
|
mod_storage_sql2: Auto increment columns won't be NULL, so drop nullable=false
|
Kim Alvefur |
Mon, 11 Nov 2013 23:15:26 +0100 |
|
util.sql: Rewrite auto increment columns to SERIAL for PostgreSQL
|
Kim Alvefur |
Mon, 11 Nov 2013 23:09:18 +0100 |
|
Merge 0.10->trunk
|
Matthew Wild |
Sun, 10 Nov 2013 23:10:46 +0000 |
|
util.sql: Fix to call execute on 'self' rather than 'engine' (thanks eisensheng)
|
Matthew Wild |
Sun, 10 Nov 2013 23:10:27 +0000 |
|
Merge 0.10->trunk
|
Matthew Wild |
Sun, 10 Nov 2013 18:50:01 +0000 |
|
Merge 0.9->0.10
|
Matthew Wild |
Sun, 10 Nov 2013 18:49:34 +0000 |
|
certmanager: Update default cipher string to prefer forward-secrecy over cipher strength and to disable triple-DES (weaker and much slower than AES)
|
Matthew Wild |
Sun, 10 Nov 2013 18:46:48 +0000 |
|
util.set: Remove unused variable
|
Matthew Wild |
Sun, 10 Nov 2013 16:43:10 +0000 |
|
Merge 0.10->trunk
|
Matthew Wild |
Sat, 09 Nov 2013 18:37:13 +0000 |
|
Merge 0.9->0.10
|
Matthew Wild |
Sat, 09 Nov 2013 18:36:32 +0000 |
|
mod_storage_sql2: Fix backwards comparison of timestamp
|
Kim Alvefur |
Thu, 07 Nov 2013 17:18:20 +0100 |
|
certmanager: Fix order of options, so that the dynamic option is at the end of the array
|
Matthew Wild |
Sat, 09 Nov 2013 17:54:21 +0000 |
|
certmanager: Default to using the server's cipher preference order by default, as clients have been shown to commonly select weak and insecure ciphers even when they support stronger ones
|
Matthew Wild |
Sat, 09 Nov 2013 17:50:19 +0000 |
|
core.moduleapi: Fix some global accesses.
|
Waqas Hussain |
Wed, 06 Nov 2013 14:38:51 -0500 |
|
core/moduleapi: Return timer object from module:add_timer
|
daurnimator |
Wed, 06 Nov 2013 12:56:35 -0500 |
|
util/timer: Re-set params when timer is rescheduled
|
daurnimator |
Wed, 06 Nov 2013 12:56:18 -0500 |
|
Merge 0.10 -> trunk
|
Kim Alvefur |
Thu, 31 Oct 2013 20:49:03 +0100 |
|
Merge 0.9 -> 0.10
|
Kim Alvefur |
Thu, 31 Oct 2013 20:47:57 +0100 |
|
certmanager: Disable SSLv3 by default
|
Kim Alvefur |
Thu, 31 Oct 2013 19:00:36 +0100 |
|
mod_storage_sql2: Switch to the util.sql table definition for the main table
|
Kim Alvefur |
Thu, 31 Oct 2013 00:53:59 +0100 |
|
mod_storage_sql2: The prosodyarchive_index should be unique
|
Kim Alvefur |
Wed, 30 Oct 2013 22:37:07 +0100 |
|
mod_storage_sql2: Use primary_key and auto_increment flags instead of baking that into the type
|
Kim Alvefur |
Wed, 30 Oct 2013 22:27:22 +0100 |
|
mod_storage_sql2: Use MEDIUMTEXT fields for value columns (ie TEXT on non-MySQL)
|
Kim Alvefur |
Wed, 30 Oct 2013 14:33:15 +0100 |
|
util.sql: Rewrite MEDIUMTEXT to TEXT for drivers other than MySQL
|
Kim Alvefur |
Wed, 30 Oct 2013 10:24:35 +0100 |
|
util.sql: Check what encoding SQLite3 uses
|
Kim Alvefur |
Tue, 29 Oct 2013 11:43:49 +0100 |
|
util.sql: Find out if MySQL supports utf8mb4 and use that
|
Kim Alvefur |
Tue, 29 Oct 2013 11:42:55 +0100 |
|
util.sql: Support incrementing columns
|
Kim Alvefur |
Mon, 28 Oct 2013 23:20:25 +0100 |
|
util.sql: Allow columns to be marked the primary key
|
Kim Alvefur |
Mon, 28 Oct 2013 23:19:47 +0100 |
|
util.sql: Allow creating unique indices
|
Kim Alvefur |
Mon, 28 Oct 2013 23:18:54 +0100 |
|
mod_storage_sql2: Move checking of the sql_manage_tables option so it also includes table upgrades (again)
|
Kim Alvefur |
Mon, 28 Oct 2013 22:08:46 +0100 |
|
mod_storage_sql2, util.sql: Move code for setting encoding to util.sql
|
Kim Alvefur |
Mon, 28 Oct 2013 22:07:16 +0100 |
|
mod_storage_sql2: Move all schema upgrade code to the same place
|
Kim Alvefur |
Mon, 28 Oct 2013 21:37:30 +0100 |
|
mod_storage_sql2: Split up setting of encoding and table upgrade code
|
Kim Alvefur |
Mon, 28 Oct 2013 21:34:55 +0100 |
|
util.timer: Import all require upvalues.
|
Waqas Hussain |
Wed, 30 Oct 2013 17:58:17 -0400 |
|
util.timer: Fix another variable name typo (thanks again zash).
|
Waqas Hussain |
Wed, 30 Oct 2013 17:56:00 -0400 |
|
util.timer: Fix variable name typo.
|
Waqas Hussain |
Wed, 30 Oct 2013 17:51:37 -0400 |
|
util.timer: Updated to use util.indexedbheap to provide a more complete API. Timers can now be stopped or rescheduled. Callbacks are now pcall'd. Adding/removing timers from within timer callbacks works better. Optional parameter can be passed when creating timer which gets passed to callback, eliminating the need for closures in various timer uses. Timers are now much more lightweight.
|
Waqas Hussain |
Wed, 30 Oct 2013 17:44:42 -0400 |
|
util.indexedbheap: A priority queue implementation with a reverse index with no per-entry memory allocation.
|
Waqas Hussain |
Wed, 30 Oct 2013 17:30:35 -0400 |
|
Merge 0.10->trunk
|
Kim Alvefur |
Tue, 15 Oct 2013 10:48:11 +0200 |
|
certmanager: Fix. Again.
|
Kim Alvefur |
Tue, 15 Oct 2013 10:47:34 +0200 |
|
Merge 0.10->trunk
|
Kim Alvefur |
Tue, 15 Oct 2013 01:38:02 +0200 |
|
certmanager: Add back single_dh_use and single_ecdh_use to default options (Zash breaks, Zash unbreaks)
|
Kim Alvefur |
Tue, 15 Oct 2013 01:37:16 +0200 |
|
util.sasl.scram: Rename variable for clarity
|
Kim Alvefur |
Sun, 13 Oct 2013 01:43:04 +0200 |
|
util.sasl.scram: Cache profile name instead of concatenating when used
|
Kim Alvefur |
Sun, 13 Oct 2013 01:36:28 +0200 |
|
util.sasl.scram: Rewrite patterns and capture client-first-message-bare, client-final-message-without-proof
|
Kim Alvefur |
Sun, 13 Oct 2013 01:14:21 +0200 |
|
util.sasl.scram: Create the state table as late as possible, keep state in locals for faster access
|
Kim Alvefur |
Sun, 13 Oct 2013 00:29:47 +0200 |
|
util.sasl.scram: Compare gs2-header to cbind-input (Thanks Tobias)
|
Kim Alvefur |
Sat, 12 Oct 2013 21:15:36 +0200 |
|
Merge 0.10->trunk
|
Matthew Wild |
Thu, 10 Oct 2013 22:27:01 +0100 |
|
Merge 0.9->0.10
|
Matthew Wild |
Thu, 10 Oct 2013 22:26:41 +0100 |
|
util.windows: Incorrect output buffer size passed to ReadConsoleOutputAttribute (fixes issue#362, thanks yanjun).
|
Waqas Hussain |
Thu, 10 Oct 2013 17:18:16 -0400 |
|
util.sasl: Remove unused print() import.
|
Waqas Hussain |
Mon, 07 Oct 2013 18:02:58 -0400 |
|
util.sasl: Make registerMechanism a public function (again)
|
Waqas Hussain |
Mon, 07 Oct 2013 17:57:06 -0400 |
|
Merge 0.10->trunk
|
Kim Alvefur |
Mon, 07 Oct 2013 12:56:53 +0200 |
|
mod_saslauth: Collect data for channel binding only if we know for sure that the stream is encrypted
|
Kim Alvefur |
Mon, 07 Oct 2013 12:56:21 +0200 |
|
mod_c2s, mod_s2s: Set session.encrypted as session.secure does not allways mean encrypted (eg consider_bosh_secure)
|
Kim Alvefur |
Mon, 07 Oct 2013 12:43:00 +0200 |
|
Merge 0.10->trunk
|
Kim Alvefur |
Sun, 06 Oct 2013 23:53:15 +0200 |
|
util.array: Improve array:reverse() and make it work as both method and non-mutating function
|
Kim Alvefur |
Sun, 06 Oct 2013 23:18:54 +0200 |
|
util.sasl.scram: Remove unused function and import
|
Kim Alvefur |
Sun, 06 Oct 2013 23:17:05 +0200 |
|
Merge 0.10->trunk
|
Matthew Wild |
Sat, 05 Oct 2013 12:16:28 -0400 |
|
Merge 0.9->0.10
|
Matthew Wild |
Sat, 05 Oct 2013 12:15:25 -0400 |
|
muc.lib.lua: Fix Spark jabber client not displaying conference room lists, seemingly due to a missing value tag for the room description if the description has not been set
|
Paul |
Sat, 05 Oct 2013 17:11:16 +0100 |
|
mod_pep_plus: An util.pubsub based PEP module
|
Florian Zeitz |
Fri, 04 Oct 2013 18:42:44 +0200 |
|
mod_pubsub, util.pubsub: Keep track of the order of items
|
Kim Alvefur |
Fri, 04 Oct 2013 16:40:27 +0200 |
|
Merge 0.9->0.10
|
Matthew Wild |
Mon, 30 Sep 2013 23:46:38 +0100 |
|
util.filters: Fix inserting items so that higher priority filters run first
|
Kim Alvefur |
Mon, 30 Sep 2013 21:51:42 +0200 |
|
mod_storage_sql2: Add method for deleting items from archives with same syntax as :find()
|
Kim Alvefur |
Sat, 28 Sep 2013 22:04:04 +0200 |
|
mod_storage_sql2: Split out code for building WHERE clauses into separate functions
|
Kim Alvefur |
Sat, 28 Sep 2013 21:58:01 +0200 |
|
server_select: fix onreadtimeout support so that listeners can override the default (disconnect) behaviour
|
Matthew Wild |
Sat, 28 Sep 2013 18:40:48 +0100 |
|
util.x509: Only compare identity with oid-on-xmppAddr for XMPP services
|
Kim Alvefur |
Thu, 26 Sep 2013 16:55:39 +0200 |
|
util.sasl.scram: Simplify validation of client-first-message
|
Kim Alvefur |
Sun, 22 Sep 2013 04:29:27 +0200 |
|
Merge Tobias SCRAM-PLUS work
|
Kim Alvefur |
Sun, 22 Sep 2013 00:44:20 +0200 |
|
Backout ae48bf828f21
|
Kim Alvefur |
Sun, 22 Sep 2013 00:37:04 +0200 |
|
Only advertise mechanisms needing channel binding if a channel binding backend is avaliable.
|
Tobias Markmann |
Mon, 07 Feb 2011 13:24:42 +0100 |
|
sasl.util.scarm: Rearrage some code so it makes more sense.
|
Tobias Markmann |
Sun, 06 Feb 2011 13:39:32 +0100 |
|
util.sasl.scram: Checking the GS2 header for valid start flag.
|
Tobias Markmann |
Sun, 06 Feb 2011 13:20:17 +0100 |
|
mod_saslauth: Check whether LuaSec supports getpeerfinished() binding.
|
Tobias Markmann |
Mon, 17 Jan 2011 16:50:21 +0100 |
|
util.sasl.scram: Remove some debugging output.
|
Tobias Markmann |
Mon, 17 Jan 2011 16:50:21 +0100 |
|
util.sasl.scram: Adding reference to RFC 5929 'Channel Bindings for TLS'.
|
Tobias Markmann |
Mon, 17 Jan 2011 16:50:21 +0100 |
|
util.sasl.scram: Validate channel binding data of client final message.
|
Tobias Markmann |
Mon, 17 Jan 2011 16:50:21 +0100 |
|
mod_saslauth: Add channel binding handler for tls-unique channel binding.
|
Tobias Markmann |
Mon, 17 Jan 2011 16:50:21 +0100 |
|
util.sasl.scram: Use self.profile.cb for detection whether channel binding is supported or not.
|
Tobias Markmann |
Mon, 17 Jan 2011 16:50:21 +0100 |
|
mod_saslauth: Set secure socket as SASL object user data for secure sessions.
|
Tobias Markmann |
Mon, 17 Jan 2011 16:50:21 +0100 |
|
util.sasl: New method to add channel binding handler to a SASL instance.
|
Tobias Markmann |
Mon, 17 Jan 2011 16:50:21 +0100 |
|
Run with own LuaSec.
|
Tobias Markmann |
Mon, 17 Jan 2011 16:50:21 +0100 |
|
Check whether we support the proposed channel binding type.
|
Tobias Markmann |
Sat, 15 Jan 2011 17:59:15 +0100 |
|
Adding some code for channel binding advertising.
|
Tobias Markmann |
Wed, 12 Jan 2011 21:29:37 +0100 |
|
Merge 0.9->trunk
|
Matthew Wild |
Mon, 16 Sep 2013 18:41:30 +0100 |
|
Tagging 0.9.1
|
Matthew Wild |
Mon, 09 Sep 2013 11:32:03 +0100 |
|
moduleapi: Add module:unhook()
|
Matthew Wild |
Mon, 16 Sep 2013 18:41:09 +0100 |
|
net.server_select: Return handler from addclient
|
Kim Alvefur |
Fri, 06 Sep 2013 10:53:04 +0200 |
|
net.server_select: Pass on all arguments to addclient on to wrapclient
|
Kim Alvefur |
Fri, 06 Sep 2013 10:52:37 +0200 |
|
certmanager: Allow for specifying the dhparam option as a path to a file instead of a callback
|
Kim Alvefur |
Tue, 03 Sep 2013 15:43:59 +0200 |
|
Merge 0.9->trunk
|
Kim Alvefur |
Tue, 03 Sep 2013 13:43:39 +0200 |
|
certmanager: Fix dhparam callback, missing imports (Testing, pfft)
0.9.1
|
Kim Alvefur |
Tue, 03 Sep 2013 13:40:29 +0200 |
|
Merge 0.9->trunk
|
Matthew Wild |
Tue, 03 Sep 2013 12:32:18 +0100 |
|
mod_admin_adhoc: As the only user of set:items(), update... it's now an iterator, and the extra keys() iterator is now unnecessary
|
Matthew Wild |
Tue, 03 Sep 2013 12:22:22 +0100 |
|
util.set: :items() now returns an iterator instead of the underlying table. This is much more efficient than 'for item in set' (which still works for now). Current access to _items is generally done directly, this may change.
|
Matthew Wild |
Tue, 03 Sep 2013 12:21:43 +0100 |
|
certmanager: Allow for specifying the dhparam option as a path to a file instead of a callback
|
Kim Alvefur |
Tue, 03 Sep 2013 13:13:31 +0200 |
|
certmanager: Fix for working around a bug with LuaSec 0.4.1 that causes it to not honour the 'ciphers' option. This change will apply 0.9's default cipher string for LuaSec 0.4.1 users.
|
Matthew Wild |
Tue, 03 Sep 2013 12:11:11 +0100 |
|
Merge 0.9->trunk
|
Matthew Wild |
Tue, 03 Sep 2013 00:20:28 +0100 |
|
util.set: Fix :include() and :exclude() methods to iterate the input set correctly
|
Matthew Wild |
Mon, 02 Sep 2013 20:52:19 +0100 |
|
util.pposix: Fix building on non-Linux with glibc
|
Kim Alvefur |
Mon, 02 Sep 2013 18:19:38 +0200 |
|
configmanager: Fix checking of absolute paths on Windows
|
Kim Alvefur |
Fri, 30 Aug 2013 18:51:55 +0200 |
|
util.net: Fix s2sout on Windows (return 0.0.0.0 and :: instead of an empty list)
|
Kim Alvefur |
Fri, 30 Aug 2013 16:14:31 +0200 |
|
prosodyctl: check: Support for unicode (IDN) domains (thanks once again albert)
|
Matthew Wild |
Mon, 02 Sep 2013 15:22:41 +0100 |
|
mod_muc: Support for locking newly-created rooms until they are configured (enabled with muc_room_locking = true)
|
Matthew Wild |
Fri, 30 Aug 2013 14:15:29 +0100 |
|
mod_muc: Import util.array
|
Matthew Wild |
Fri, 30 Aug 2013 14:10:51 +0100 |
|
prosody.cfg.lua.dist: Set c2s_require_encryption = true
|
Matthew Wild |
Thu, 29 Aug 2013 11:59:27 +0100 |
|
Merge 0.9->trunk
|
Matthew Wild |
Sat, 24 Aug 2013 23:16:08 +0100 |
|
mod_pep: Update COMPAT comment, it seems Asterisk 1.8 also suffers from this issue (thanks Lonnie Abelbeck)
|
Matthew Wild |
Sat, 24 Aug 2013 23:15:24 +0100 |
|
Added tag 0.9.0 for changeset 6ef79af0c445
|
Matthew Wild |
Mon, 19 Aug 2013 20:36:04 +0100 |
|
mod_c2s: Move another log message to debug level
|
Kim Alvefur |
Wed, 14 Aug 2013 15:38:56 +0200 |
|
mod_c2s, mod_s2s: Log cipher and encryption info in a more compact and (hopefully) less confusing way
|
Kim Alvefur |
Wed, 14 Aug 2013 15:00:36 +0200 |
|
mod_s2s: Captitalize log messages that begin with a stream direction
|
Kim Alvefur |
Wed, 14 Aug 2013 14:53:50 +0200 |
|
mod_s2s: Lower "Beginning new connection attempt" message from info to debug level
|
Kim Alvefur |
Wed, 14 Aug 2013 14:44:56 +0200 |
|
mod_s2s/s2sout.lib: Improve error message logged at 'info' level when failing to connect to a host. Now 'Failed in all attempts to connect to XYZ'
|
Matthew Wild |
Wed, 14 Aug 2013 00:18:39 +0100 |
|
util.async: Make guarder() local
|
Matthew Wild |
Tue, 13 Aug 2013 23:38:50 +0100 |
|
util.async: Add guarder method, to create guards to ensure only a single runner can pass through a section of code at a time
|
Matthew Wild |
Tue, 13 Aug 2013 21:26:53 +0100 |
