apitech
/
prosody
mirror of https://github.com/bjc/prosody
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
7371 Commits
12 Branches
101 Tags
54 MiB
Tag: Branch: Tree: d7789712da
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'd7789712da'
${ noResults }
Commit Graph

101 Commits (d7789712dab1431eafbf00a8f3bb68e45738bc86)

Author SHA1 Message Date
Kim Alvefur 269b993aee core.certmanager: Translate "no start line" to something friendlier (thanks santiago)
9 years ago
Kim Alvefur b421c1992e core.certmanager: Split cipher list into array with comments explaining each part
9 years ago
Kim Alvefur 0e989e1401 certmanager: Assume default config path of '.' (fixes prosodyctl check certs when not installed)
10 years ago
Matthew Wild 71b31dde25 certmanager: Explicitly tonumber() version number segments before doing arithmetic and avoid relying on implicit coercion (thanks David Favro)
10 years ago
Matthew Wild 68d19b7be1 certmanager: Localize tonumber
10 years ago
Kim Alvefur ef1ad262f7 certmanager: Try filename.key if certificate is set to a full filename ending with .crt
10 years ago
Kim Alvefur 439a62a853 certmanager: Apply global ssl config later so certificate/key is not overwritten by magic
10 years ago
Matthew Wild e2b370c6bf certmanager: Support new certificate configuration for non-XMPP services too (fixes #614)
10 years ago
Kim Alvefur c32b0e36d6 core.certmanager: Look for certificate and key in a few different places
10 years ago
Kim Alvefur 14d22d84e4 core.certmanager: Remove non-string filenames (allows setting eg capath to false to disable the built in default)
10 years ago
Matthew Wild 26cd63e77f certmanager, net.http: Disable SSLv3 by default
11 years ago
Kim Alvefur 27265c20e2 core.*: Remove use of module() function
11 years ago
Kim Alvefur b7a38c8c93 certmanager: Fix compat for MattJs old LuaSec fork
11 years ago
Kim Alvefur f715115939 certmanager: Fix previous commit
11 years ago
Kim Alvefur 664c92cdde certmanager: Limit certificate chain depth to 9
11 years ago
Kim Alvefur 3581c71067 certmanager: Options that appear to be available since LuaSec 0.2
11 years ago
Kim Alvefur bf57457852 certmanager: Improve "detection" of features that depend on LuaSec version
11 years ago
Kim Alvefur fb96020a96 certmanager: Add locals for ssl.context and ssl.x509
11 years ago
Kim Alvefur 7565573fec certmanager: Early return from the entire module if LuaSec is unavailable
11 years ago
Matthew Wild 186f9ee295 certmanager: Make global variable access explicit
11 years ago
Kim Alvefur 49ba0ce08d certmanager, mod_tls: Return final ssl config as third return value (fix for c6caaa440e74, portmanager assumes non-falsy second return value is an error) (thanks deoren)
11 years ago
Kim Alvefur 843afaf372 certmanager: Return final ssl config along with ssl context on success
11 years ago
Kim Alvefur 349d03f965 core.certmanager: Make create_context() support an arbitrary number of option sets, merging all
12 years ago
Kim Alvefur 40cbe58541 core.certmanager: Use util.sslconfig
12 years ago
Kim Alvefur 36b77bca8b core.certmanager, core.moduleapi, mod_storage_sql, mod_storage_sql2: Import from util.paths
12 years ago
Kim Alvefur 2b09f7cffb certmanager: Move ssl.protocol handling to after ssl.options is a table (thanks Ralph)
12 years ago
Kim Alvefur aa3344731d certmanager: Fix traceback if no global 'ssl' section set (thanks albert)
12 years ago
Kim Alvefur 42c69fe339 certmanager: Update ssl_compression when config is reloaded
12 years ago
Kim Alvefur 1d19874ae8 certmanager: Reformat core ssl defaults
12 years ago
Kim Alvefur 9f51849d63 certmanager: Support ssl.protocol syntax like "tlsv1+" that disables older protocols
12 years ago
Kim Alvefur 38b74a51ef certmanager: Merge ssl.options, verify etc from core defaults and global ssl settings with inheritance while allowing options to be disabled per virtualhost
12 years ago
Kim Alvefur a0daf05646 certmanager: Wrap long line and add comment
12 years ago
Kim Alvefur c2da2e47e1 certmanager: Concatenate cipher list if given as a table
12 years ago
Kim Alvefur cdf5ff9176 certmanager: Allow non-server contexts to be without certificate and key
12 years ago
Kim Alvefur 05d6f3e713 certmanager: Check for non-nil values instead of true-ish values, allows removing defaults
12 years ago
Matthew Wild 9609c710c6 certmanager: Further cipher string tweaking. Re-enable ciphers required for DSA and ECDH certs/keys.
12 years ago
Matthew Wild 1ee55840ff Back out 1b0ac7950129, as SSLv3 appears to still be in moderate use on the network. Also, although obsolete, SSLv3 isn't documented to have any weaknesses that TLS 1.0 (the most common version used today) doesn't also have. Get your act together clients!
12 years ago
Matthew Wild 07a71ad6aa certmanager: Update default cipher string to prefer forward-secrecy over cipher strength and to disable triple-DES (weaker and much slower than AES)
12 years ago
Matthew Wild dbf699af30 certmanager: Fix order of options, so that the dynamic option is at the end of the array
12 years ago
Matthew Wild 98221c3991 certmanager: Default to using the server's cipher preference order by default, as clients have been shown to commonly select weak and insecure ciphers even when they support stronger ones
12 years ago
Kim Alvefur 45ecf509ed certmanager: Disable SSLv3 by default
12 years ago
Kim Alvefur 4c2ea20af4 certmanager: Fix. Again.
12 years ago
Kim Alvefur 65931067bf certmanager: Add back single_dh_use and single_ecdh_use to default options (Zash breaks, Zash unbreaks)
12 years ago
Kim Alvefur 247c7be5c7 certmanager: Allow for specifying the dhparam option as a path to a file instead of a callback
13 years ago
Kim Alvefur 628910498b certmanager: Fix dhparam callback, missing imports (Testing, pfft)
13 years ago
Kim Alvefur 7f9fe6d4cd certmanager: Allow for specifying the dhparam option as a path to a file instead of a callback
13 years ago
Matthew Wild cf82f353b7 certmanager: Fix for working around a bug with LuaSec 0.4.1 that causes it to not honour the 'ciphers' option. This change will apply 0.9's default cipher string for LuaSec 0.4.1 users.
13 years ago
Florian Zeitz 1d833bb807 Remove all trailing whitespace
13 years ago
Matthew Wild 2840e0726a certmanager: Set our own default cipher string, which includes only ciphers regarded as 'HIGH' strength (by OpenSSL). In particular this disables RC4.
13 years ago
Matthew Wild 0aef21fc95 certmanager: Add single_dh_use and single_ecdh_use to default options
13 years ago