Kim Alvefur
|
bbdd807af4
|
mod_s2s: Mark stream as opened directly after opening stream, prevents session.close opening it again
|
11 years ago |
Kim Alvefur
|
edfc34c0fb
|
mod_s2s: Don't cache session.sends2s (or do it later), prevents sending data after session was closed
|
11 years ago |
Kim Alvefur
|
8057766c7f
|
mod_s2s/s2sout: Use the local address assigned to UDP sockets instead of util.net to enumerate possible source addresses
|
11 years ago |
Kim Alvefur
|
250115f542
|
mod_s2s/s2sout: Remove now unused config option dns_max_depth
|
11 years ago |
Kim Alvefur
|
f458d7b46d
|
net.dns, mod_s2s: Add chasing of CNAMEs to net.dns and remove it from mod_s2s
|
11 years ago |
Matthew Wild
|
c8cfb78d7e
|
mod_s2s: to/from attributes are required on s2s stream headers. Set them to '' when not available. Fixes #468.
|
11 years ago |
Kim Alvefur
|
aa9e7abd10
|
mod_s2s: Capitalize log message
|
12 years ago |
Matthew Wild
|
58edf57b1f
|
net.http, net.http.server, mod_c2s, mod_s2s, mod_component, mod_admin_telnet, mod_net_multiplex: Add ondetach to release connection from 'sessions' table (or equivalent)
|
12 years ago |
Kim Alvefur
|
84a056c50b
|
mod_s2s: Close offending s2s streams missing an 'id' attribute with a stream error instead of throwing an unhandled error
|
12 years ago |
Matthew Wild
|
d2e9a31bf5
|
mod_c2s, mod_s2s: Log received invalid stream headers
|
12 years ago |
Kim Alvefur
|
9736855cd3
|
mod_s2s: Reset stream ID when resetting stream [compliance]
|
12 years ago |
Kim Alvefur
|
cab2148453
|
mod_s2s: Mark stream as opened earlier for outgoing connections, fixes double stream headers on policy failures
|
12 years ago |
Kim Alvefur
|
3343d921c7
|
mod_s2s: Log a warning if no local addresses are found, as this breaks s2sout
|
12 years ago |
Florian Zeitz
|
a80be99fef
|
mod_s2s: Include IP in log messages, if host is unavailable
|
13 years ago |
Kim Alvefur
|
2d80fe3bbd
|
mod_admin_telnet, mod_s2s: Fix reporting of certificate chain validation details
|
13 years ago |
Kim Alvefur
|
4749336127
|
mod_s2s: Improve policy check
|
13 years ago |
Kim Alvefur
|
bfe5b17163
|
mod_s2s: Log certificate identity validation result
|
13 years ago |
Matthew Wild
|
67f89befd7
|
mod_s2s/s2sout.lib: Remove unused variables and imports
|
13 years ago |
Matthew Wild
|
fac4a3ce24
|
mod_s2s/s2sout.lib: Remove reference to undefined global
|
13 years ago |
Matthew Wild
|
2071826108
|
mod_s2s/s2sout.lib: Use new util.net.local_addresses() to fetch local interface addresses
|
13 years ago |
Matthew Wild
|
db9c911711
|
mod_s2s/s2sout.lib: Only attempt to create an IPv6 socket if LuaSocket supports IPv6
|
13 years ago |
Matthew Wild
|
0da93732c7
|
mod_s2s: Fix interaction between s2s_secure_auth and s2s_require_encryption, in particular ensure that when s2s_require_encryption is NOT set, do not require encryption on s2s_insecure_domains.
|
13 years ago |
Florian Zeitz
|
81cb2e4380
|
util.rfc{3484,6724}: Update to RFC 6724
|
13 years ago |
Matthew Wild
|
f704c2bc90
|
mod_s2s: Ensure that to/from on stream headers are always correct, fixes #338
|
13 years ago |
Matthew Wild
|
231a76965c
|
mod_s2s: Obey tcp_keepalives option for s2s too, and make it individually configurable through s2s_tcp_keepalives (thanks yeled)
|
13 years ago |
Matthew Wild
|
70e81c21b7
|
mod_c2s, mod_s2s, net.http, net.http.server: Improve tracebacks (omit traceback function), to make it clearer where an error occured
|
13 years ago |
Matthew Wild
|
c63dc9181d
|
mod_c2s, mod_s2s, net.http, net.http.server: Improve tracebacks (omit traceback function), to make it clearer where an error occured
|
13 years ago |
Kim Alvefur
|
6d04bd7093
|
mod_s2s: Add missing space
|
13 years ago |
Kim Alvefur
|
aa3cbd5039
|
mod_s2s: Adjust priority of route/remote hooks to negative values (like most other internal hooks)
|
13 years ago |
Kim Alvefur
|
52fe78c768
|
mod_s2s: Add COMPAT cahin verification code for older LuaSec versions
|
13 years ago |
Matthew Wild
|
4a4f2e8b4b
|
mod_s2s: Close incoming s2s with stream error when secure and we don't trust their certificate
|
13 years ago |
Kim Alvefur
|
1ae9285628
|
mod_s2s: Prevent s2s to and from hosts we serve locally
|
13 years ago |
Kim Alvefur
|
e3b9a1075e
|
mod_s2s: Prevent traceback when replying to incoming connection to a host we don't serve
|
13 years ago |
Kim Alvefur
|
854db75cc2
|
mod_s2s: Reset secure flag on new connection attempt
|
13 years ago |
Kim Alvefur
|
82e45d1642
|
mod_s2s: session.from_host does not allways exist on incoming connections, true and nil or "our hostname" does not evaluate to what we want here
|
13 years ago |
Kim Alvefur
|
27377b9936
|
mod_s2s: Keep the dns answer object around a while so plugins can look at it
|
13 years ago |
Matthew Wild
|
b1ce27375d
|
mod_s2s: Fix variable usage in check_auth_policy (thanks Florob)
|
13 years ago |
Matthew Wild
|
1ebb493e38
|
mod_s2s: Remove unused variable
|
13 years ago |
Matthew Wild
|
541f26b542
|
mod_s2s: Add controls for certificate validation via the s2s_secure_auth option. Plugins can now return false from handling s2s-check-certificate to prevent connection establishment (s2sin+s2sout)
|
13 years ago |
Matthew Wild
|
f068e80993
|
s2smanager, mod_s2s, mod_dialback, mod_saslauth: Move s2smanager.make_authenticated() to mod_s2s, and plugins now signal authentication via the s2s-authenticated event
|
13 years ago |
Kim Alvefur
|
04b647a6e8
|
mod_s2s, mod_saslauth, mod_compression: Refactor to have common code for opening streams
|
13 years ago |
Matthew Wild
|
b1e980e67b
|
mod_s2s: Do not include xmlns:db declaration in stream header if mod_dialback is not loaded
|
13 years ago |
Kim Alvefur
|
5f13122f42
|
mod_s2s: Make sure host variable is reachable
|
13 years ago |
Matthew Wild
|
d53df86e91
|
mod_s2s: Fire s2s-check-certificate event after validating a certificate, to allow plugins to override standard procedure
|
13 years ago |
Matthew Wild
|
e39fde2361
|
mod_s2s, mod_dialback: Rename s2s-authenticate-legacy event to s2sout-authenticate-legacy for clarity. Also, hello!
|
13 years ago |
Kim Alvefur
|
e9a03725ff
|
mod_s2s: Don't try to close sessions that were destroyed before timeout
|
13 years ago |
Kim Alvefur
|
4cb252484c
|
prosody, mod_c2s, mod_s2s: Move closing of c2s and s2s sessions to respective plugins
|
14 years ago |
Matthew Wild
|
12e6964065
|
mod_s2s: Remove connection from sessions table as soon as we learn it is disconnected. Fixes a connection/session leak.
|
14 years ago |
Kim Alvefur
|
9a7f520609
|
mod_s2s: Detect TLS compression
|
14 years ago |
Waqas Hussain
|
025eca8452
|
mod_{admin_telnet,c2s,component,http,net_multiplex,s2s}: Use module:provides() instead of module:add_item().
|
14 years ago |