apitech
/
prosody
mirror of https://github.com/bjc/prosody
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
7566 Commits
12 Branches
101 Tags
54 MiB
Tag: Branch: Tree: 0ff1619ea4
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '0ff1619ea4'
${ noResults }
Commit Graph

97 Commits (0ff1619ea4e2a6702a3fb70135fb656efd64790b)

Author SHA1 Message Date
Kim Alvefur 1ad8af8bc2 mod_tls: Rebuild SSL context objects on configuration reload - #701
9 years ago
Kim Alvefur d716a015a5 mod_tls: Switch to hook_tag from hook_stanza which was renamed in 2087d42f1e77
9 years ago
Kim Alvefur 217ecf012a mod_tls: Suppress debug message if already using encryption
9 years ago
Kim Alvefur 7b00dce835 mod_tls: Log reasons for not being able to do TLS
9 years ago
Kim Alvefur 8ee33e543a mod_tls: Check that connection has starttls method first to prevent offering starttls over tls (thanks Remko and Tobias)
9 years ago
Kim Alvefur b3f172a68e mod_tls: Return session.ssl_ctx if not nil, like when doing the full session type check
9 years ago
Kim Alvefur 14a692951e mod_tls: Add debug logging for when TLS should be doable but no ssl context was set
9 years ago
Kim Alvefur a5d48058fb mod_tls: Verify that TLS is available before proceeding
9 years ago
Kim Alvefur 31ac4804c2 mod_tls: Only accept <proceed> on outgoing s2s connections
9 years ago
Kim Alvefur d7e905d70e mod_tls: Ignore unused argument [luacheck]
9 years ago
Kim Alvefur 5d077a0c17 mod_tls: Fix ssl option fallback to a "parent" host if current host does not have ssl options set (thanks 70b1)
10 years ago
Kim Alvefur 4c05e2b5f4 mod_tls: Remove unused reference to global ssl config option (certmanager adds that to the context)
10 years ago
Kim Alvefur b7086832f4 mod_tls: Fix inhertinance of 'ssl' option from "parent" host to subdomain (fixes #511)
10 years ago
Kim Alvefur 5085777f13 mod_tls: Treat session.ssl_ctx being false as a signal that TLS is disabled
11 years ago
Kim Alvefur 6e7394f5f3 mod_tls: Build <starttls/> as a stanza instead of with string concatenation
11 years ago
Kim Alvefur a5fc6e29d9 certmanager, mod_tls: Return final ssl config as third return value (fix for c6caaa440e74, portmanager assumes non-falsy second return value is an error) (thanks deoren)
11 years ago
Kim Alvefur 727c5935a8 mod_tls: Keep ssl config around and attach them to sessions
11 years ago
Kim Alvefur fbd277b5c8 mod_legacyauth, mod_saslauth, mod_tls: Pass require_encryption as default option to s2s_require_encryption so the later overrides the former
11 years ago
Kim Alvefur f56c435f18 mod_lastactivity, mod_legacyauth, mod_presence, mod_saslauth, mod_tls: Use the newer stanza:get_child APIs and optimize away some table lookups
12 years ago
Kim Alvefur 93e9f09839 mod_tls: Simplify and use new ssl config merging in certmanager
12 years ago
Matthew Wild 04381afb7d mod_tls: Log error when TLS initialization fails
12 years ago
Florian Zeitz 4b618a8727 Remove all trailing whitespace
13 years ago
Kim Alvefur 5f29d70b54 mod_tls: Remove debug statement
13 years ago
Kim Alvefur 6e4e7abe94 mod_tls: Let s2s_secure_auth override s2s_require_encryption and warn if they differ
12 years ago
Kim Alvefur 57cbc8549a mod_tls: Rename variables to be less confusing
12 years ago
Kim Alvefur e7585fe301 mod_tls: Refactor to allow separate SSL configuration for c2s and s2s connections
13 years ago
Kim Alvefur 915e1bddf3 mod_tls: More use of config sections removed
13 years ago
Kim Alvefur 98dea85ed2 mod_announce, mod_auth_anonymous, mod_c2s, mod_c2s, mod_component, mod_iq, mod_message, mod_presence, mod_tls: Access prosody.{hosts,bare_sessions,full_sessions} instead of the old globals
13 years ago
Matthew Wild 97507e207a mod_tls: Fix log statement (thanks Zash)
14 years ago
Matthew Wild 2d8a08de12 mod_tls: Fix for components to more reliably inherit SSL settings from their parenthost (thanks Link Mauve)
15 years ago
Matthew Wild 5d21de7e3d mod_tls: Drop 'TLS negotiation started for ...' to debug level from info
15 years ago
Matthew Wild 2f3b7c048e mod_tls: Drop 'TLS negotiation started for ...' to debug level from info
15 years ago
Waqas Hussain 86eb430400 mod_tls: Let hosts without an 'ssl' option inherit it from their parent hosts.
15 years ago
Matthew Wild 8e91da96f8 mod_tls: Pass the hostname rather than host session to certmanager.create_context() (thanks darkrain)
15 years ago
Matthew Wild c6045f3c70 certmanager, hostmanager, mod_tls: Move responsibility for creating per-host SSL contexts to mod_tls, meaning reloading certs is now as trivial as reloading mod_tls
15 years ago
Matthew Wild 16fa172b23 mod_tls: Remove extraneous flag to starttls() for s2sout connecections
16 years ago
Matthew Wild 67a0c4e8db mod_tls: Add s2s_allow_encryption option which, when set to false, disabled TLS for s2s
16 years ago
Matthew Wild 2bc0606453 Update copyright headers for 2010
16 years ago
Matthew Wild 8a18a4cc28 mod_tls: Only negotiate TLS on outgoing s2s connections if we have an SSL context (thanks Flo...)
16 years ago
Waqas Hussain b4b0f22159 mod_tls: Ban TLS after auth, not before.
16 years ago
Waqas Hussain 3ca0b28b54 mod_tls: Fixed traceback during S2S TLS (nil global access).
16 years ago
Matthew Wild 8d64ab2d1f mod_tls: Refactor to simplify detection of whether we can do TLS on a connection
16 years ago
Matthew Wild f7573ef4ff mod_tls: Don't offer TLS on hosts that don't have any certs
16 years ago
Waqas Hussain 1445574fd3 s2smanager, mod_compression, mod_tls: Changed event.session to event.origin for s2s-stream-features event for consistency.
16 years ago
Waqas Hussain 4233a8ccf5 mod_tls: Hook stream-features event using new events API.
16 years ago
Waqas Hussain 75459a7ca5 mod_tls: Cleanup.
16 years ago
Waqas Hussain 4df5e22f1e mod_tls: Fixed an extra :up() in s2s stream feature generation.
16 years ago
Waqas Hussain 91d9bb9a66 mod_tls: Remove origin type check when TLS is requested (thanks MattJ).
16 years ago
Waqas Hussain 2bfb7b55ed mod_tls: Respond with proper error when TLS cannot be negotiated.
16 years ago
Waqas Hussain eeca1d016a mod_tls: Inlined some code.
16 years ago