Commit Graph

1312 Commits (5c1d94de1b67353da7e2c348379c8a8509a9e66a)

Author SHA1 Message Date
Kim Alvefur 283cee6209 stanza_router: Fix routing of 'error' IQs with multiple childs (thanks Pawel) 11 years ago
Matthew Wild 26cd63e77f certmanager, net.http: Disable SSLv3 by default 11 years ago
Kim Alvefur 20d003813e core.stanza_router: Stricter validation of stanzas 11 years ago
Kim Alvefur 3dc45c1222 modulemanager: Reduce warning to debug level message about modules already being loaded, it's probably just module:depends() 12 years ago
Matthew Wild fa962495db configmanager: nameprep VirtualHost and Component names 12 years ago
Kim Alvefur eeacb3cb6f configmanager: Delay importing LuaFileSystem until needed by an Include line 12 years ago
Matthew Wild 5273af7c22 portmanager: Make maximum read size configurable, and default to 4KB 12 years ago
Kim Alvefur 461da4b3b6 modulemanager: Load mod_saslauth on components by default 12 years ago
Matthew Wild 9609c710c6 certmanager: Further cipher string tweaking. Re-enable ciphers required for DSA and ECDH certs/keys. 12 years ago
Matthew Wild 1ee55840ff Back out 1b0ac7950129, as SSLv3 appears to still be in moderate use on the network. Also, although obsolete, SSLv3 isn't documented to have any weaknesses that TLS 1.0 (the most common version used today) doesn't also have. Get your act together clients! 12 years ago
Matthew Wild 07a71ad6aa certmanager: Update default cipher string to prefer forward-secrecy over cipher strength and to disable triple-DES (weaker and much slower than AES) 12 years ago
Matthew Wild dbf699af30 certmanager: Fix order of options, so that the dynamic option is at the end of the array 12 years ago
Matthew Wild 98221c3991 certmanager: Default to using the server's cipher preference order by default, as clients have been shown to commonly select weak and insecure ciphers even when they support stronger ones 12 years ago
Kim Alvefur 45ecf509ed certmanager: Disable SSLv3 by default 12 years ago
Kim Alvefur 628910498b certmanager: Fix dhparam callback, missing imports (Testing, pfft) 13 years ago
Kim Alvefur 7f9fe6d4cd certmanager: Allow for specifying the dhparam option as a path to a file instead of a callback 13 years ago
Matthew Wild cf82f353b7 certmanager: Fix for working around a bug with LuaSec 0.4.1 that causes it to not honour the 'ciphers' option. This change will apply 0.9's default cipher string for LuaSec 0.4.1 users. 13 years ago
Kim Alvefur e7c0815019 configmanager: Fix checking of absolute paths on Windows 13 years ago
Matthew Wild 2840e0726a certmanager: Set our own default cipher string, which includes only ciphers regarded as 'HIGH' strength (by OpenSSL). In particular this disables RC4. 13 years ago
Matthew Wild 0aef21fc95 certmanager: Add single_dh_use and single_ecdh_use to default options 13 years ago
Matthew Wild 1290bf766c certmanager: Set ssl.curve to 'secp384r1' by default, to enable ECC ciphers 13 years ago
Matthew Wild 040187b661 certmanager: Use 'curve' and 'dhparam' options from ssl config if present 13 years ago
Matthew Wild 840cf714cf certmanager: Disable SSL compression if possible (LuaSec 0.5 or 0.4.1+OpenSSL 1.x) 13 years ago
Kim Alvefur 99c908e11a portmanager: Also include the interface the service is listening on 13 years ago
Waqas Hussain 372de588be portmanager: Include port numbers the service is listening on in the info logs. 13 years ago
Kim Alvefur d9bff06d21 moduleapi: in module:provides(), add the name of the module in item._provided_by 13 years ago
Kim Alvefur 7ad8f743bb moduleapi: module:provides called without an item makes a copy of the environment instead. Fixes warnings about non-existent globals 13 years ago
Matthew Wild bcc1074dd5 moduleapi: Add module:get_option_inherited_set() to return a set that inherits items from a globally set set, if set 13 years ago
Matthew Wild 82faa21dd3 moduleapi: Add module:context(host) to produce a fake API context for a given host (or global). module:context("*"):get_option("foo") to get global options. 13 years ago
Waqas Hussain c75fdb5081 storagemanager: Fix traceback in logging when store type is nil, and store is unsupported. 13 years ago
Kim Alvefur cde9a24132 moduleapi: Make module:open_store() open a store named after the calling module by default 13 years ago
Matthew Wild 81216b737e moduleapi: Add module:open_store() as a front-end to storagemanager.open() 13 years ago
Matthew Wild 18889eae1b sessionmanager, s2smanager: Remove unused imports 13 years ago
Matthew Wild a5e2b65c01 sessionmanager, s2smanager: Remove open_session tracing 13 years ago
Matthew Wild 401fb29994 moduleapi: assert() that prosody.core_post_stanza is not nil 13 years ago
Matthew Wild 4624a05183 portmanager: import pairs() (thanks Maranda) 13 years ago
Marco Cirillo 123fef628e rostermanager: do not save rosters for unexistant users. 13 years ago
Marco Cirillo 7cd207a8f6 portmanager: add logic to allow specification of service default values for ssl config and / or overrides. 13 years ago
Matthew Wild 245f460991 configmanager: Some cleanup, remove unused variables and imports 13 years ago
Marco Cirillo fd14557245 moduleapi: have get_host_items wrap on get_items from modulemanager, also add has_{feature/identity} to the API. 13 years ago
Marco Cirillo 4453095de2 modulemanager: add missing ipairs import. 13 years ago
Marco Cirillo a299b9096d modulemanager: add function to retrieve module items from a specific host entity. 13 years ago
Matthew Wild 3e788bfa6e portmanager: Log error and fail to bind when port is invalid (not a number) 13 years ago
Kim Alvefur 077cfbe8a4 portmanager: Add use_ipv4 option, default to true. 13 years ago
Kim Alvefur 45fa794da0 portmanager: use_ipv6 defaults to true if luasocket has ipv6 support 13 years ago
Kim Alvefur 869da6c240 configmanager: Fix so unset variables are searched for in the global section 13 years ago
Kim Alvefur 1acfdf5914 core.*: Complete removal of all traces of the "core" section and section-related code. 13 years ago
Matthew Wild c908af2a7d s2smanager: Remove unused function parameter 13 years ago
Matthew Wild 5f6e150c61 s2smanager: Access prosody.hosts instead of hosts global directly 13 years ago
Matthew Wild 339e74b1b9 s2smanager, mod_s2s, mod_dialback, mod_saslauth: Move s2smanager.make_authenticated() to mod_s2s, and plugins now signal authentication via the s2s-authenticated event 13 years ago