Commit Graph

74 Commits (b7ed261e7dfd367f3bc5a8bef654b91ba74feb97)

Author SHA1 Message Date
Kim Alvefur bbdd807af4 mod_s2s: Mark stream as opened directly after opening stream, prevents session.close opening it again 11 years ago
Kim Alvefur edfc34c0fb mod_s2s: Don't cache session.sends2s (or do it later), prevents sending data after session was closed 11 years ago
Kim Alvefur 8057766c7f mod_s2s/s2sout: Use the local address assigned to UDP sockets instead of util.net to enumerate possible source addresses 11 years ago
Kim Alvefur 250115f542 mod_s2s/s2sout: Remove now unused config option dns_max_depth 11 years ago
Kim Alvefur f458d7b46d net.dns, mod_s2s: Add chasing of CNAMEs to net.dns and remove it from mod_s2s 11 years ago
Matthew Wild c8cfb78d7e mod_s2s: to/from attributes are required on s2s stream headers. Set them to '' when not available. Fixes #468. 11 years ago
Kim Alvefur aa9e7abd10 mod_s2s: Capitalize log message 12 years ago
Matthew Wild 58edf57b1f net.http, net.http.server, mod_c2s, mod_s2s, mod_component, mod_admin_telnet, mod_net_multiplex: Add ondetach to release connection from 'sessions' table (or equivalent) 12 years ago
Kim Alvefur 84a056c50b mod_s2s: Close offending s2s streams missing an 'id' attribute with a stream error instead of throwing an unhandled error 12 years ago
Matthew Wild d2e9a31bf5 mod_c2s, mod_s2s: Log received invalid stream headers 12 years ago
Kim Alvefur 9736855cd3 mod_s2s: Reset stream ID when resetting stream [compliance] 12 years ago
Kim Alvefur cab2148453 mod_s2s: Mark stream as opened earlier for outgoing connections, fixes double stream headers on policy failures 12 years ago
Kim Alvefur 3343d921c7 mod_s2s: Log a warning if no local addresses are found, as this breaks s2sout 12 years ago
Florian Zeitz a80be99fef mod_s2s: Include IP in log messages, if host is unavailable 13 years ago
Kim Alvefur 2d80fe3bbd mod_admin_telnet, mod_s2s: Fix reporting of certificate chain validation details 13 years ago
Kim Alvefur 4749336127 mod_s2s: Improve policy check 13 years ago
Kim Alvefur bfe5b17163 mod_s2s: Log certificate identity validation result 13 years ago
Matthew Wild 67f89befd7 mod_s2s/s2sout.lib: Remove unused variables and imports 13 years ago
Matthew Wild fac4a3ce24 mod_s2s/s2sout.lib: Remove reference to undefined global 13 years ago
Matthew Wild 2071826108 mod_s2s/s2sout.lib: Use new util.net.local_addresses() to fetch local interface addresses 13 years ago
Matthew Wild db9c911711 mod_s2s/s2sout.lib: Only attempt to create an IPv6 socket if LuaSocket supports IPv6 13 years ago
Matthew Wild 0da93732c7 mod_s2s: Fix interaction between s2s_secure_auth and s2s_require_encryption, in particular ensure that when s2s_require_encryption is NOT set, do not require encryption on s2s_insecure_domains. 13 years ago
Florian Zeitz 81cb2e4380 util.rfc{3484,6724}: Update to RFC 6724 13 years ago
Matthew Wild f704c2bc90 mod_s2s: Ensure that to/from on stream headers are always correct, fixes #338 13 years ago
Matthew Wild 231a76965c mod_s2s: Obey tcp_keepalives option for s2s too, and make it individually configurable through s2s_tcp_keepalives (thanks yeled) 13 years ago
Matthew Wild 70e81c21b7 mod_c2s, mod_s2s, net.http, net.http.server: Improve tracebacks (omit traceback function), to make it clearer where an error occured 13 years ago
Matthew Wild c63dc9181d mod_c2s, mod_s2s, net.http, net.http.server: Improve tracebacks (omit traceback function), to make it clearer where an error occured 13 years ago
Kim Alvefur 6d04bd7093 mod_s2s: Add missing space 13 years ago
Kim Alvefur aa3cbd5039 mod_s2s: Adjust priority of route/remote hooks to negative values (like most other internal hooks) 13 years ago
Kim Alvefur 52fe78c768 mod_s2s: Add COMPAT cahin verification code for older LuaSec versions 13 years ago
Matthew Wild 4a4f2e8b4b mod_s2s: Close incoming s2s with stream error when secure and we don't trust their certificate 13 years ago
Kim Alvefur 1ae9285628 mod_s2s: Prevent s2s to and from hosts we serve locally 13 years ago
Kim Alvefur e3b9a1075e mod_s2s: Prevent traceback when replying to incoming connection to a host we don't serve 13 years ago
Kim Alvefur 854db75cc2 mod_s2s: Reset secure flag on new connection attempt 13 years ago
Kim Alvefur 82e45d1642 mod_s2s: session.from_host does not allways exist on incoming connections, true and nil or "our hostname" does not evaluate to what we want here 13 years ago
Kim Alvefur 27377b9936 mod_s2s: Keep the dns answer object around a while so plugins can look at it 13 years ago
Matthew Wild b1ce27375d mod_s2s: Fix variable usage in check_auth_policy (thanks Florob) 13 years ago
Matthew Wild 1ebb493e38 mod_s2s: Remove unused variable 13 years ago
Matthew Wild 541f26b542 mod_s2s: Add controls for certificate validation via the s2s_secure_auth option. Plugins can now return false from handling s2s-check-certificate to prevent connection establishment (s2sin+s2sout) 13 years ago
Matthew Wild f068e80993 s2smanager, mod_s2s, mod_dialback, mod_saslauth: Move s2smanager.make_authenticated() to mod_s2s, and plugins now signal authentication via the s2s-authenticated event 13 years ago
Kim Alvefur 04b647a6e8 mod_s2s, mod_saslauth, mod_compression: Refactor to have common code for opening streams 13 years ago
Matthew Wild b1e980e67b mod_s2s: Do not include xmlns:db declaration in stream header if mod_dialback is not loaded 13 years ago
Kim Alvefur 5f13122f42 mod_s2s: Make sure host variable is reachable 13 years ago
Matthew Wild d53df86e91 mod_s2s: Fire s2s-check-certificate event after validating a certificate, to allow plugins to override standard procedure 13 years ago
Matthew Wild e39fde2361 mod_s2s, mod_dialback: Rename s2s-authenticate-legacy event to s2sout-authenticate-legacy for clarity. Also, hello! 13 years ago
Kim Alvefur e9a03725ff mod_s2s: Don't try to close sessions that were destroyed before timeout 13 years ago
Kim Alvefur 4cb252484c prosody, mod_c2s, mod_s2s: Move closing of c2s and s2s sessions to respective plugins 14 years ago
Matthew Wild 12e6964065 mod_s2s: Remove connection from sessions table as soon as we learn it is disconnected. Fixes a connection/session leak. 14 years ago
Kim Alvefur 9a7f520609 mod_s2s: Detect TLS compression 14 years ago
Waqas Hussain 025eca8452 mod_{admin_telnet,c2s,component,http,net_multiplex,s2s}: Use module:provides() instead of module:add_item(). 14 years ago