Kim Alvefur
|
283cee6209
|
stanza_router: Fix routing of 'error' IQs with multiple childs (thanks Pawel)
|
11 years ago |
Matthew Wild
|
26cd63e77f
|
certmanager, net.http: Disable SSLv3 by default
|
11 years ago |
Kim Alvefur
|
20d003813e
|
core.stanza_router: Stricter validation of stanzas
|
11 years ago |
Kim Alvefur
|
3dc45c1222
|
modulemanager: Reduce warning to debug level message about modules already being loaded, it's probably just module:depends()
|
12 years ago |
Matthew Wild
|
fa962495db
|
configmanager: nameprep VirtualHost and Component names
|
12 years ago |
Kim Alvefur
|
eeacb3cb6f
|
configmanager: Delay importing LuaFileSystem until needed by an Include line
|
12 years ago |
Matthew Wild
|
5273af7c22
|
portmanager: Make maximum read size configurable, and default to 4KB
|
12 years ago |
Kim Alvefur
|
461da4b3b6
|
modulemanager: Load mod_saslauth on components by default
|
12 years ago |
Matthew Wild
|
9609c710c6
|
certmanager: Further cipher string tweaking. Re-enable ciphers required for DSA and ECDH certs/keys.
|
12 years ago |
Matthew Wild
|
1ee55840ff
|
Back out 1b0ac7950129, as SSLv3 appears to still be in moderate use on the network. Also, although obsolete, SSLv3 isn't documented to have any weaknesses that TLS 1.0 (the most common version used today) doesn't also have. Get your act together clients!
|
12 years ago |
Matthew Wild
|
07a71ad6aa
|
certmanager: Update default cipher string to prefer forward-secrecy over cipher strength and to disable triple-DES (weaker and much slower than AES)
|
12 years ago |
Matthew Wild
|
dbf699af30
|
certmanager: Fix order of options, so that the dynamic option is at the end of the array
|
12 years ago |
Matthew Wild
|
98221c3991
|
certmanager: Default to using the server's cipher preference order by default, as clients have been shown to commonly select weak and insecure ciphers even when they support stronger ones
|
12 years ago |
Kim Alvefur
|
45ecf509ed
|
certmanager: Disable SSLv3 by default
|
12 years ago |
Kim Alvefur
|
628910498b
|
certmanager: Fix dhparam callback, missing imports (Testing, pfft)
|
13 years ago |
Kim Alvefur
|
7f9fe6d4cd
|
certmanager: Allow for specifying the dhparam option as a path to a file instead of a callback
|
13 years ago |
Matthew Wild
|
cf82f353b7
|
certmanager: Fix for working around a bug with LuaSec 0.4.1 that causes it to not honour the 'ciphers' option. This change will apply 0.9's default cipher string for LuaSec 0.4.1 users.
|
13 years ago |
Kim Alvefur
|
e7c0815019
|
configmanager: Fix checking of absolute paths on Windows
|
13 years ago |
Matthew Wild
|
2840e0726a
|
certmanager: Set our own default cipher string, which includes only ciphers regarded as 'HIGH' strength (by OpenSSL). In particular this disables RC4.
|
13 years ago |
Matthew Wild
|
0aef21fc95
|
certmanager: Add single_dh_use and single_ecdh_use to default options
|
13 years ago |
Matthew Wild
|
1290bf766c
|
certmanager: Set ssl.curve to 'secp384r1' by default, to enable ECC ciphers
|
13 years ago |
Matthew Wild
|
040187b661
|
certmanager: Use 'curve' and 'dhparam' options from ssl config if present
|
13 years ago |
Matthew Wild
|
840cf714cf
|
certmanager: Disable SSL compression if possible (LuaSec 0.5 or 0.4.1+OpenSSL 1.x)
|
13 years ago |
Kim Alvefur
|
99c908e11a
|
portmanager: Also include the interface the service is listening on
|
13 years ago |
Waqas Hussain
|
372de588be
|
portmanager: Include port numbers the service is listening on in the info logs.
|
13 years ago |
Kim Alvefur
|
d9bff06d21
|
moduleapi: in module:provides(), add the name of the module in item._provided_by
|
13 years ago |
Kim Alvefur
|
7ad8f743bb
|
moduleapi: module:provides called without an item makes a copy of the environment instead. Fixes warnings about non-existent globals
|
13 years ago |
Matthew Wild
|
bcc1074dd5
|
moduleapi: Add module:get_option_inherited_set() to return a set that inherits items from a globally set set, if set
|
13 years ago |
Matthew Wild
|
82faa21dd3
|
moduleapi: Add module:context(host) to produce a fake API context for a given host (or global). module:context("*"):get_option("foo") to get global options.
|
13 years ago |
Waqas Hussain
|
c75fdb5081
|
storagemanager: Fix traceback in logging when store type is nil, and store is unsupported.
|
13 years ago |
Kim Alvefur
|
cde9a24132
|
moduleapi: Make module:open_store() open a store named after the calling module by default
|
13 years ago |
Matthew Wild
|
81216b737e
|
moduleapi: Add module:open_store() as a front-end to storagemanager.open()
|
13 years ago |
Matthew Wild
|
18889eae1b
|
sessionmanager, s2smanager: Remove unused imports
|
13 years ago |
Matthew Wild
|
a5e2b65c01
|
sessionmanager, s2smanager: Remove open_session tracing
|
13 years ago |
Matthew Wild
|
401fb29994
|
moduleapi: assert() that prosody.core_post_stanza is not nil
|
13 years ago |
Matthew Wild
|
4624a05183
|
portmanager: import pairs() (thanks Maranda)
|
13 years ago |
Marco Cirillo
|
123fef628e
|
rostermanager: do not save rosters for unexistant users.
|
13 years ago |
Marco Cirillo
|
7cd207a8f6
|
portmanager: add logic to allow specification of service default values for ssl config and / or overrides.
|
13 years ago |
Matthew Wild
|
245f460991
|
configmanager: Some cleanup, remove unused variables and imports
|
13 years ago |
Marco Cirillo
|
fd14557245
|
moduleapi: have get_host_items wrap on get_items from modulemanager, also add has_{feature/identity} to the API.
|
13 years ago |
Marco Cirillo
|
4453095de2
|
modulemanager: add missing ipairs import.
|
13 years ago |
Marco Cirillo
|
a299b9096d
|
modulemanager: add function to retrieve module items from a specific host entity.
|
13 years ago |
Matthew Wild
|
3e788bfa6e
|
portmanager: Log error and fail to bind when port is invalid (not a number)
|
13 years ago |
Kim Alvefur
|
077cfbe8a4
|
portmanager: Add use_ipv4 option, default to true.
|
13 years ago |
Kim Alvefur
|
45fa794da0
|
portmanager: use_ipv6 defaults to true if luasocket has ipv6 support
|
13 years ago |
Kim Alvefur
|
869da6c240
|
configmanager: Fix so unset variables are searched for in the global section
|
13 years ago |
Kim Alvefur
|
1acfdf5914
|
core.*: Complete removal of all traces of the "core" section and section-related code.
|
13 years ago |
Matthew Wild
|
c908af2a7d
|
s2smanager: Remove unused function parameter
|
13 years ago |
Matthew Wild
|
5f6e150c61
|
s2smanager: Access prosody.hosts instead of hosts global directly
|
13 years ago |
Matthew Wild
|
339e74b1b9
|
s2smanager, mod_s2s, mod_dialback, mod_saslauth: Move s2smanager.make_authenticated() to mod_s2s, and plugins now signal authentication via the s2s-authenticated event
|
13 years ago |