1023 Commits (1e8388b311c54d754d6afbe639ed2825c1c1f285)

Author	SHA1	Message	Date
Matthew Hodgson	d9713e916e	changelog	6 years ago
Erik Johnston	2f16857ca9	Newsfile	6 years ago
Andrew Morgan	7033b05cad	Add changelog	6 years ago
Will Hunt	e83a190643	Update changelog.d/4666.feature ... Co-Authored-By: erikjohnston <erikj@jki.re>	6 years ago
Erik Johnston	91c8a7f9f4	Newsfile	6 years ago
Andrew Morgan	5b68e12fd8	Typo in changelog ... Co-Authored-By: babolivier <contact@brendanabolivier.com>	6 years ago
Travis Ralston	da95867d30	Changelog	6 years ago
Brendan Abolivier	1895d14e12	Support .well-known delegation when issuing certificates through ACME	6 years ago
Richard van der Hoff	f595d6ac57	0.99.1.1	6 years ago
Richard van der Hoff	f311018823	Fix errors in acme provisioning (#4648) ... * Better logging for errors on startup * Fix "TypeError: '>' not supported" when starting without an existing certificate * Fix a bug where an existing certificate would be reprovisoned every day	6 years ago
Erik Johnston	4074c8b968	Newsfile	6 years ago
Erik Johnston	0927adb012	Newsfile	6 years ago
Erik Johnston	6cb415b63f	Fixup comments and add warning	6 years ago
Richard van der Hoff	3bc238629e	0.99.1rc2	6 years ago
Amber Brown	bb4fd8f927	Run `black` on user directory code (#4635)	6 years ago
Richard van der Hoff	2d0e0a4044	changelog	6 years ago
Erik Johnston	dc70789056	Newsfile	6 years ago
Erik Johnston	d2fa7b7e99	Update changelog and version	6 years ago
Erik Johnston	b18cd25e42	Fixup changelog entries	6 years ago
Erik Johnston	b2327eb9cb	Newsfile	6 years ago
Erik Johnston	218cc071c5	Newsfile	6 years ago
Richard van der Hoff	2418b91bb7	README updates (#4621) ... Lots of updates to the README/INSTALL.md. Fixes #4601.	6 years ago
Richard van der Hoff	a4ce91396b	Disable TLS by default (#4614)	6 years ago
Richard van der Hoff	32b781bfe2	Fix error when loading cert if tls is disabled (#4618) ... If TLS is disabled, it should not be an error if no cert is given. Fixes #4554.	6 years ago
Richard van der Hoff	dfc846a316	fix self-signed cert notice from generate-config ... fixes #4620	6 years ago
Richard van der Hoff	91f8cd3307	Remove redundant entries from docker config ... * no_tls is now redundant (#4613) * we don't need a dummy cert any more (#4618)	6 years ago
Richard van der Hoff	4fddf8fc77	Infer no_tls from presence of TLS listeners ... Rather than have to specify `no_tls` explicitly, infer whether we need to load the TLS keys etc from whether we have any TLS-enabled listeners.	6 years ago
Richard van der Hoff	9645728619	Don't create server contexts when TLS is disabled ... we aren't going to use them anyway.	6 years ago
Richard van der Hoff	2129dd1a02	Fail cleanly if listener config lacks a 'port' ... ... otherwise we would fail with a mysterious KeyError or something later.	6 years ago
Richard van der Hoff	086f6f27d4	Logging improvements around TLS certs ... Log which file we're reading keys and certs from, and refactor the code a bit in preparation for other work	6 years ago
Richard van der Hoff	5d27730a73	Move ClientTLSOptionsFactory init out of refresh_certificates (#4611) ... It's nothing to do with refreshing the certificates. No idea why it was here.	6 years ago
Richard van der Hoff	24b7f3916d	Clean up default listener configuration (#4586) ... Rearrange the comments to try to clarify them, and expand on what some of it means. Use a sensible default 'bind_addresses' setting. For the insecure port, only bind to localhost, and enable x_forwarded, since apparently it's for use behind a load-balancer.	6 years ago
Richard van der Hoff	c475275926	Clarifications for reverse proxy docs (#4607) ... Factor out the reverse proxy info to a separate file, add some more info on reverse-proxying the federation port.	6 years ago
Andrew Morgan	eff2042217	Changelog	6 years ago
Amber Brown	6e2a5aa050	ACME Reprovisioning (#4522)	6 years ago
Amber Brown	4ffd10f46d	Be tolerant of blank TLS fingerprints config (#4589)	6 years ago
Valentin Anger	2dc2b6e9f1	Allow "unavailable" presence status for /sync (#4592) ... * Allow "unavailable" presence status for /sync Closes #3772, closes #3779 Signed-off-by: Valentin Anger <valentin.an.1999@gmail.com> * Add changelog for PR 4592	6 years ago
Richard van der Hoff	56710c7df5	Fix 'no unique or exclusion constraint' error (#4591) ... Add more tables to the list of tables which need a background update to complete before we can upsert into them, which fixes a race against the background updates.	6 years ago
Amber Brown	9cd33d2f4b	Deduplicate some code in synapse.app (#4567)	6 years ago
Erik Johnston	acb2ac5863	Update MSC1711 FAQ to be explicit about well-known (#4584) ... A surprising number of people are using the well-known method, and are simply copying the example configuration. This is problematic as the example includes an explicit port, which causes inbound federation requests to have the HTTP Host header include the port, upsetting some reverse proxies. Given that, we update the well-known example to be more explicit about the various ways you can set it up, and the consequence of using an explict port.	6 years ago
Erik Johnston	43e16ea3bc	Newsfile	6 years ago
Andrew Morgan	c17b128b83	Update ACME docs to include port instructions (#4578)	6 years ago
Hubert Chathi	51b73be63b	add changelog entry	6 years ago
Richard van der Hoff	d8e63846e2	Fix docker upload job to push -py2 images (#4576)	6 years ago
Richard van der Hoff	3bd9daf4b8	v0.99.0	6 years ago
Neil Johnson	6585ef4799	Neilj/1711faq (#4572) ... MSC1711 certificates FAQ	6 years ago
Richard van der Hoff	40b35fb875	Enable ACME support in the docker image (#4566) ... Also: * Fix wrapping in docker readme * Clean up some docs on the docker image * a workaround for #4554	6 years ago
Andrew Morgan	627ecd358e	Filter user directory state query to a subset of state events (#4462) ... * Filter user directory state query to a subset of state events * Add changelog	6 years ago
Richard van der Hoff	3ef71a6ea0	Docker: only copy what we need to the build image (#4562) ... There are two reasons this is a good thing: * first, it means that you don't end up with stuff kicking around your working copy ending up in the build image by mistake (which can upset the pip install process) * second: it means that the docker image cache is more effective, and we can reuse docker images when iterating on the docker stuff.	6 years ago
Richard van der Hoff	bf1e4d96ad	Fix default ACME config for py2 (#4564) ... Fixes #4559	6 years ago