13 Commits (ea2f97e9ed8317dc9a62e45d9a807dca7e3700a5)

Author	SHA1	Message	Date
Kim Alvefur	c0a3026414	mod_s2s_auth_certs: Handle potential string error ... conn:ssl_peerverification() can now return a single error in case the connection has been closed for whatever reason	2 years ago
Kim Alvefur	ae884642d5	mod_s2s_auth_certs: Remove LuaSec compat that moved to net.server	2 years ago
Kim Alvefur	98922d54b1	plugins: Prefix module imports with prosody namespace	3 years ago
Kim Alvefur	85ff75c53f	mod_s2s_auth_certs: Validate certificates against secure SRV targets ... Secure delegation or "Mini-DANE" As with the existing DANE support, only usable in one direction, client certificate authentication will fail if this is relied on.	3 years ago
Kim Alvefur	62f32cd01d	Revert unintentionally committed parts of 12bd40b8e105	3 years ago
Kim Alvefur	a46ae8cb89	mod_c2s,mod_s2s: Adapt to XEP-xxxx: Stream Limits Advertisement ... Thanks MattJ	3 years ago
Jonas Schäfer	38346dd6f1	net: isolate LuaSec-specifics ... For this, various accessor functions are now provided directly on the sockets, which reach down into the LuaSec implementation to obtain the information. While this may seem of little gain at first, it hides the implementation detail of the LuaSec+LuaSocket combination that the actual socket and the TLS layer are separate objects. The net gain here is that an alternative implementation does not have to emulate that specific implementation detail and "only" has to expose LuaSec-compatible data structures on the new functions.	4 years ago
Kim Alvefur	cc49e02cae	mod_s2s_auth_certs: Collect stats on validation results (for #975)	4 years ago
Kim Alvefur	f864eaf14f	mod_s2s_auth_certs: Save chain validation errors for later use	6 years ago
Kim Alvefur	b16782257d	Remove COMPAT with temporary luasec fork ... The changes in the temporary fork were merged into mainline luasec ca 2013 and included in the 0.5 release in 2014.	6 years ago
Kim Alvefur	899b61ad0f	mod_s2s_auth_certs: Warn about lack of certificate (Mostly jabberd14 not sending a client certificate)	12 years ago
Kim Alvefur	a960fa32ac	mod_s2s_auth_certs: Pick a logging function once and stick with it	12 years ago
Kim Alvefur	bd17040999	mod_s2s_auth_certs: Split PKIX based certificate checking from mod_s2s into new plugin	12 years ago