apitech
/
prosody
mirror of https://github.com/bjc/prosody
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
5659 Commits
12 Branches
101 Tags
54 MiB
Tag: Branch: Tree: 5c1d94de1b
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '5c1d94de1b'
${ noResults }
Commit Graph

73 Commits (5c1d94de1b67353da7e2c348379c8a8509a9e66a)

Author SHA1 Message Date
Kim Alvefur 410ab5d97b mod_tls: Let s2s_secure_auth override s2s_require_encryption and warn if they differ
12 years ago
Kim Alvefur 573c5bea61 mod_tls: Rename variables to be less confusing
12 years ago
Matthew Wild 342de92462 mod_tls: Log error when TLS initialization fails
12 years ago
Kim Alvefur 16c7c4e78d mod_tls: More use of config sections removed
13 years ago
Kim Alvefur 27dc3a5b9a mod_announce, mod_auth_anonymous, mod_c2s, mod_c2s, mod_component, mod_iq, mod_message, mod_presence, mod_tls: Access prosody.{hosts,bare_sessions,full_sessions} instead of the old globals
13 years ago
Matthew Wild 32d3713a7a mod_tls: Fix log statement (thanks Zash)
14 years ago
Matthew Wild 2d8a08de12 mod_tls: Fix for components to more reliably inherit SSL settings from their parenthost (thanks Link Mauve)
15 years ago
Matthew Wild e3c845abcf mod_tls: Drop 'TLS negotiation started for ...' to debug level from info
15 years ago
Matthew Wild 2f3b7c048e mod_tls: Drop 'TLS negotiation started for ...' to debug level from info
15 years ago
Waqas Hussain 86eb430400 mod_tls: Let hosts without an 'ssl' option inherit it from their parent hosts.
15 years ago
Matthew Wild 8e91da96f8 mod_tls: Pass the hostname rather than host session to certmanager.create_context() (thanks darkrain)
15 years ago
Matthew Wild c6045f3c70 certmanager, hostmanager, mod_tls: Move responsibility for creating per-host SSL contexts to mod_tls, meaning reloading certs is now as trivial as reloading mod_tls
15 years ago
Matthew Wild 16fa172b23 mod_tls: Remove extraneous flag to starttls() for s2sout connecections
16 years ago
Matthew Wild 67a0c4e8db mod_tls: Add s2s_allow_encryption option which, when set to false, disabled TLS for s2s
16 years ago
Matthew Wild 2bc0606453 Update copyright headers for 2010
16 years ago
Matthew Wild 8a18a4cc28 mod_tls: Only negotiate TLS on outgoing s2s connections if we have an SSL context (thanks Flo...)
16 years ago
Waqas Hussain b4b0f22159 mod_tls: Ban TLS after auth, not before.
16 years ago
Waqas Hussain 3ca0b28b54 mod_tls: Fixed traceback during S2S TLS (nil global access).
16 years ago
Matthew Wild 8d64ab2d1f mod_tls: Refactor to simplify detection of whether we can do TLS on a connection
16 years ago
Matthew Wild f7573ef4ff mod_tls: Don't offer TLS on hosts that don't have any certs
16 years ago
Waqas Hussain 1445574fd3 s2smanager, mod_compression, mod_tls: Changed event.session to event.origin for s2s-stream-features event for consistency.
16 years ago
Waqas Hussain 4233a8ccf5 mod_tls: Hook stream-features event using new events API.
16 years ago
Waqas Hussain 75459a7ca5 mod_tls: Cleanup.
16 years ago
Waqas Hussain 4df5e22f1e mod_tls: Fixed an extra :up() in s2s stream feature generation.
16 years ago
Waqas Hussain 91d9bb9a66 mod_tls: Remove origin type check when TLS is requested (thanks MattJ).
16 years ago
Waqas Hussain 2bfb7b55ed mod_tls: Respond with proper error when TLS cannot be negotiated.
16 years ago
Waqas Hussain eeca1d016a mod_tls: Inlined some code.
16 years ago
Waqas Hussain 23cbd2c45e mod_tls: Merged duplicate code.
16 years ago
Waqas Hussain 9d2742cc9a mod_tls: Switched to new events API.
16 years ago
Waqas Hussain bdc87e4345 mod_tls: Slight refactoring.
16 years ago
Waqas Hussain 6d21bd8cf4 mod_tls: Don't advertise TLS after authentication.
16 years ago
Matthew Wild 0a591ad33a mod_tls: Remove some redundant variable declarations
16 years ago
Matthew Wild b870a3fe51 mod_tls: Set the sslctx on outgoing connections (possibly the cause of outgoing s2s connections not being encrypted)
16 years ago
Matthew Wild f8a121c33b mod_tls: Update for new server SSL syntax
16 years ago
Matthew Wild 0c333f589c mod_tls: Set the sslctx on outgoing connections (possibly the cause of outgoing s2s connections not being encrypted)
16 years ago
Matthew Wild d578bb8ff2 mod_tls: Switch to : syntax for connection methods
16 years ago
Matthew Wild 4bfd2f37a9 mod_tls: Don't offer TLS on hosts that don't have any certs
16 years ago
Waqas Hussain db783f4a21 mod_tls: Fixed an extra :up() in s2s stream feature generation.
16 years ago
Waqas Hussain 2e726abc77 mod_tls: Respond with proper error when TLS cannot be negotiated.
16 years ago
Matthew Wild a3472930c0 mod_tls: Offer the host-specific cert (when there is one) to incoming c2s/s2s connections, fixes #30 (thanks, albert, Flo, johnny, and all who nagged me :) )
16 years ago
Matthew Wild ed822f1ef0 mod_tls: Don't try to start TLS if we can't actually do it (thanks Florob)
16 years ago
Matthew Wild fd3ddd9222 mod_tls: Catch s2s-stream-features and add starttls feature if possible
16 years ago
Matthew Wild f13dfe04be mod_tls: Mark sessions as not secure when negotiating outward TLS, so they get marked secure later. Fixes missing (encrypted) for outgoing sessions in s2s:show(). Thanks albert, McKael :)
16 years ago
Matthew Wild 9ea966ae38 mod_tls: require_s2s_encryption -> s2s_require_encryption
16 years ago
Matthew Wild de057a2b2b require_encryption deprecated, use c2s_require_encryption instead
16 years ago
Matthew Wild 57d6a05e83 mod_tls: Mark starttls feature as <required/> if require_s2s_encryption is enabled
16 years ago
Matthew Wild 6e6adedce2 mod_tls: Mark session as not secure before negotiating TLS
16 years ago
Matthew Wild 0737347176 mod_tls: Only advertise TLS if the server told us which host they are connecting to
16 years ago
Matthew Wild c6ec71bee0 mod_tls: :up() out of the starttls tag in stream:features
16 years ago
Paul Aurich 02d5993f79 Minor changes; outgoing TLS works.
16 years ago