51 Commits (0b36decfb6ea05a84a8efe6b73c2d8718e2a32ab)

Author	SHA1	Message	Date
Erik Johnston	a9bcae9f50	Share SSL options for well-known requests	5 years ago
Amber Brown	4806651744	Replace returnValue with return (#5736)	5 years ago
Amber Brown	463b072b12	Move logging utilities out of the side drawer of util/ and into logging/ (#5606)	5 years ago
Richard van der Hoff	c3c6b00d95	Pass config_dir_path and data_dir_path into Config.read_config. (#5522) ... * Pull config_dir_path and data_dir_path calculation out of read_config_files * Pass config_dir_path and data_dir_path into read_config	6 years ago
Amber Brown	32e7c9e7f2	Run Black. (#5482)	6 years ago
Richard van der Hoff	db74c4fc6c	fix ci on py2, again	6 years ago
Richard van der Hoff	19780a521e	fix CI on python 2.7	6 years ago
Richard van der Hoff	e016681221	Tests for SSL certs for federation connections ... Add some tests for bad certificates for federation and .well-known connections	6 years ago
Richard van der Hoff	9fbb20a531	Stop hardcoding trust of old matrix.org key (#5374) ... There are a few changes going on here: * We make checking the signature on a key server response optional: if no verify_keys are specified, we trust to TLS to validate the connection. * We change the default config so that it does not require responses to be signed by the old key. * We replace the old 'perspectives' config with 'trusted_key_servers', which is also formatted slightly differently. * We emit a warning to the logs every time we trust a key server response signed by the old key.	6 years ago
Richard van der Hoff	e2dfb922e1	Validate federation server TLS certificates by default.	6 years ago
Amber Brown	df2ebd75d3	Migrate all tests to use the dict-based config format instead of hanging items off HomeserverConfig (#5171)	6 years ago
Andrew Morgan	5a4b328f52	Add ability to blacklist ip ranges for federation traffic (#5043)	6 years ago
Amber Brown	b36c82576e	Run Black on the tests again (#5170)	6 years ago
Andrew Morgan	6824ddd93d	Config option for verifying federation certificates (MSC 1711) (#4967)	6 years ago
Andrew Morgan	bb52a2e653	lint	6 years ago
Andrew Morgan	cd36a1283b	New test, fix issues	6 years ago
Andrew Morgan	c69df5d5d3	Fix comments. v0.99.2 -> v0.99.3	6 years ago
Andrew Morgan	94cb7939e4	Federation test fixed!	6 years ago
Andrew Morgan	621e7f37f1	Better exception handling	6 years ago
Andrew Morgan	ecea5af491	Correct var name	6 years ago
Andrew Morgan	86c60bda15	i should have given up x3	6 years ago
Andrew Morgan	45524f2f5e	i should have given up x2	6 years ago
Richard van der Hoff	5d27730a73	Move ClientTLSOptionsFactory init out of refresh_certificates (#4611) ... It's nothing to do with refreshing the certificates. No idea why it was here.	6 years ago
Richard van der Hoff	8a21b03fba	Treat an invalid .well-known the same as an absent one ... ... basically, carry on and fall back to SRV etc.	6 years ago
Richard van der Hoff	d428b46346	Update federation routing logic to check .well-known before SRV	6 years ago
Richard van der Hoff	c7b24ac3d0	Follow redirects on .well-known (#4520)	6 years ago
Richard van der Hoff	bc5f6e1797	Add a caching layer to .well-known responses (#4516)	6 years ago
Richard van der Hoff	cc2d650ef7	Relax requirement for a content-type on .well-known (#4511)	6 years ago
Richard van der Hoff	99e36d5e24	Implement MSC1708 (.well-known lookups for server routing) (#4489)	6 years ago
Richard van der Hoff	f2b553d656	Use SimpleResolverComplexifier in tests (#4497) ... two reasons for this. One, it saves a bunch of boilerplate. Two, it squashes unicode to IDNA-in-a-`str` (even on python 3) in a way that it turns out we rely on to give consistent behaviour between python 2 and 3.	6 years ago
Richard van der Hoff	0fd5b3b53e	Handle IP literals explicitly ... We don't want to be doing .well-known lookups on these guys.	6 years ago
Richard van der Hoff	d840019192	Fix idna and ipv6 literal handling in MatrixFederationAgent (#4487) ... Turns out that the library does a better job of parsing URIs than our reinvented wheel. Who knew. There are two things going on here. The first is that, unlike parse_server_name, URI.fromBytes will strip off square brackets from IPv6 literals, which means that it is valid input to ClientTLSOptionsFactory and HostnameEndpoint. The second is that we stay in `bytes` throughout (except for the argument to ClientTLSOptionsFactory), which avoids the weirdness of (sometimes) ending up with idna-encoded values being held in `unicode` variables. TBH it probably would have been ok but it made the tests fragile.	6 years ago
Richard van der Hoff	8520bc3109	Fix Host header sent by MatrixFederationAgent (#4468) ... Move the Host header logic down here so that (a) it is used if we reuse the agent elsewhere, and (b) we can mess about with it with .well-known.	6 years ago
Richard van der Hoff	afd69a0920	Look up the right SRV record	6 years ago
Richard van der Hoff	e1c8440e0c	lots more tests for MatrixFederationAgent	6 years ago
Richard van der Hoff	97fd29c019	Don't send IP addresses as SNI (#4452) ... The problem here is that we have cut-and-pasted an impl from Twisted, and then failed to maintain it. It was fixed in Twisted in https://github.com/twisted/twisted/pull/1047/files; let's do the same here.	6 years ago
Richard van der Hoff	d02c4532c0	Add a test for MatrixFederationAgent	6 years ago
Richard van der Hoff	7021784d46	put resolve_service in an object ... this makes it easier to stub things out for tests.	6 years ago
Richard van der Hoff	53a327b4d5	Require that service_name be a byte string ... it is only ever a bytes now, so let's enforce that.	6 years ago
Richard van der Hoff	7871146667	Make MatrixFederationClient use MatrixFederationAgent ... ... instead of the matrix_federation_endpoint	6 years ago
Richard van der Hoff	33a55289cb	Refactor and bugfix for resove_service (#4427)	6 years ago
Richard van der Hoff	de6888e7ce	Remove redundant WrappedConnection (#4409) ... * Remove redundant WrappedConnection The matrix federation client uses an HTTP connection pool, which times out its idle HTTP connections, so there is no need for any of this business.	6 years ago
Erik Johnston	b970cb0e96	Refactor request sending to have better excpetions (#4358) ... * Correctly retry and back off if we get a HTTPerror response * Refactor request sending to have better excpetions MatrixFederationHttpClient blindly reraised exceptions to the caller without differentiating "expected" failures (e.g. connection timeouts etc) versus more severe problems (e.g. programming errors). This commit adds a RequestSendFailed exception that is raised when "expected" failures happen, allowing the TransactionQueue to log them as warnings while allowing us to log other exceptions as actual exceptions.	6 years ago
Oleg Girko	7d3f639844	Fix compatibility issue with older Twisted in tests. ... Older Twisted (18.4.0) returns TimeoutError instead of ConnectingCancelledError when connection times out. This change allows tests to be compatible with this behaviour. Signed-off-by: Oleg Girko <ol@infoserver.lv>	6 years ago
Richard van der Hoff	31c15dcb80	Refactor matrixfederationclient to fix logging (#3906) ... We want to wait until we have read the response body before we log the request as complete, otherwise a confusing thing happens where the request appears to have completed, but we later fail it. To do this, we factor the salient details of a request out to a separate object, which can then keep track of the txn_id, so that it can be logged.	6 years ago
Amber Brown	bfa0b759e0	Attempt to figure out what's going on with timeouts (#3857)	6 years ago
black	8b3d9b6b19	Run black.	6 years ago
Amber Brown	49af402019	run isort	6 years ago
Richard van der Hoff	546bc9e28b	More server_name validation ... We need to do a bit more validation when we get a server name, but don't want to be re-doing it all over the shop, so factor out a separate parse_and_validate_server_name, and do the extra validation. Also, use it to verify the server name in the config file.	6 years ago
Richard van der Hoff	508196e08a	Reject invalid server names (#3480) ... Make sure that server_names used in auth headers are sane, and reject them with a sensible error code, before they disappear off into the depths of the system.	6 years ago