| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
|
| |
Zash for test case)
This also appears to fix some bugs with chunk-encoded streams in net.http.parser.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Similar to util.ringbuffer (and shares almost identical API). Differences:
- size limit is optional and dynamic
- does not allocate a fixed buffer of max_size bytes
- focus on simply storing references to existing string objects where possible,
avoiding unnecessary allocations
- references are still stored in a ring buffer to enable use as a fast FIFO
Optional second parameter to new() provides the number of ring buffer segments. On
Lua 5.2 on my laptop, a segment is ~19 bytes. If the ring buffer fills up, the next
write will compact all strings into a single item.
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
| |
Partial backports of the following commits from trunk:
6c804b6b2ca2 net.http: Pass server name along for SNI (fixes #1408)
75d2874502c3 net.server_select: SNI support (#409)
9a905888b96c net.server_event: Add SNI support (#409)
adc0672b700e net.server_epoll: Add support for SNI (#409)
d4390c427a66 net.server: Handle server name (SNI) as extra argument
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
| |
This is a new API that should be used in preference to http.destroy_request()
when possible, as it ensures the callback is always called (with an error of
course).
APIs that have edge-cases where they don't call callbacks have, from experience,
shown to be difficult to work with and often lead to unintentional leaks when
the callback was expected to free up certain resources.
|
| |
|
|
|
| |
This was accidentally turned private in 647adfd8f738 as part of refactoring
for Lua 5.2+.
|
| |
|
|
|
|
| |
(thanks marc0s)
Fixes a traceback when passed an IP address with no conn_type.
|
| | |
|
| |
|
|
|
| |
The "Missing or invalid 'Host' header" case was dead code previously
because `host` was always at least an empty string.
|
| |
|
|
|
| |
E.g. given `[::1]:5280` it would previously result in only `[` instead
of the correct `[::1]`
|
| | |
|
| | |
|
| |
|
|
| |
Related to #1560
|
| |
|
|
|
|
| |
Fixes something like #1560 here too.
The password sent by the user already had saslprep applied.
|
| | |
|
| |
|
|
| |
'when' field, fixes #1557
|
| |
|
|
|
|
|
|
|
| |
The stanza-id added during archiving looks exactly like what should be
stripped, so the stripping must happen before archiving.
Getting priorities right is hard!
Also no test coverage yet.
|
| |
|
|
|
|
| |
Improves experience with VoIP calls initiated via JMI
Closes #1548
|
| | |
|
| |
|
|
| |
Nice typo
|
| |
|
|
| |
Meant to reduce user confusion over what's reloaded and not.
|
| |
|
|
|
|
|
| |
27f5db07bec9 fixed this wrong. The code is supposed to check if the
stanza is NOT sent to your bare JID. A MUC PM is always sent to your
full JID. Hopefully nobody sends MUC invites to full JIDs, because those
would be skipped by this as well.
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(fixes #1513)
Backport of 94e341dee51c
The original intent of having kEDH before kEECDH was that if a `dhparam`
file was specified, this would be interpreted as a preference by the
admin for old and well-tested Diffie-Hellman key agreement over newer
elliptic curve ones. Otherwise the faster elliptic curve ciphersuites
would be preferred. This didn't really work as intended since this
affects the ClientHello on outgoing s2s connections, leading to some
servers using poorly configured kEDH.
With Debian shipping OpenSSL settings that enforce a higher security
level, this caused interoperability problems with servers that use DH
params smaller than 2048 bits. E.g. jabber.org at the time of this
writing has 1024 bit DH params.
MattJ says
> Curves have won, and OpenSSL is less weird about them now
|
| |
|
|
| |
Backport of 88be11e9f9b9
|
| |
|
|
|
|
|
| |
This makes
`prosodyctl cert import example.com /path/to/example.com/fullchain.pem`
work. This was never intended to, yet users commonly tried this and got
problems.
|
| |
|
|
| |
On error, the second return value is the error condition, not the third.
|
| |
|
|
| |
Backport of f90abf142d53 from trunk
|
| | |
|
| |
|
|
|
|
|
|
| |
The LuaSec :info() method gathers info using the OpenSSL function
SSL_get_current_cipher(). Documentation for this function states that it
may return NULL if no session has been established (yet). If so, the
LuaSec functions wrapping this return nil, triggering a nil-indexing
error in mod_admin_telnet.
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
| |
(fixes #1504)
This lets Prosody handle socket related work between each step in the
cleanup in order to prevent the server from being completely blocked
during this.
An async storage backend would not need this but those are currently
rare.
|
| |
|
|
|
|
| |
Some lines seem to have gotten the wrong indentation, possibly caused by
Meld which often ignores lines with only whitespace changes and leaves
their previous indentation.
|
| | |
|
| |
|
|
| |
Caused by a plugin sending a message from the room itself.
|
| |
|
|
|
|
|
|
|
| |
The 'store' path componend used to be unescaped until 756a2a00e7e7 added
escaping to address issues with characters like '/' used in PEP, but
with a special case for '_' which was already in common use in 'store'
path components.
Missed adding this escaping here.
|
| |
|
|
|
| |
0c00274528a4 moved it one step too far, so the check was performed
before connecting to the database instead of after.
|
| |
|
|
|
| |
The check was only performed if sql_manage_tables was set to true (the default)
It should always be performed
|
| |
|
|
| |
#1174)
|
| |
|
|
| |
This is now the common pattern, eg see mod_s2s.
|
| | |
|
