| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| | |
|
| |
| |
| |
| |
| | |
A "feature" is a simple string, and it's expected that we will add to (and
maybe remove from) this list over the course of time.
|
| |
| |
| |
| |
| | |
Load filters can choose to block the loading of certain files, and optionally
return some metadata about the loaded file.
|
| | |
|
| |
| |
| |
| |
| | |
Extra-extra obvious that no interaction with this should lead to
persisted changes
|
| |
| |
| |
| |
| | |
I'm not sure what went wrong here, copy-paste mistake?
Doesn't matter as long as nobody can create nodes on this service.
|
| |
| |
| |
| |
| | |
Currently it is hard codded to be a specialized stdout logger, which
should be fixed one day.
|
| |
| |
| |
| | |
Especially 'connectivity' was missing
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
Original motivation was tiresome warnings about Lua 5.4 not being
supported yet.
Can still be handy to tweak log level, e.g. to prevent logging to
interfere with command output.
|
| |
| |
| |
| | |
Filtered trough pandoc
|
| |
| |
| |
| | |
Now based on draft-ietf-dnsop-svcb-https-08
|
| |
| |
| |
| | |
Based on draft-ietf-dnsop-svcb-https-00
|
| |
| |
| |
| |
| |
| | |
Doesn't affect normal usage by Prosody since neither A nor AAAA records
use this and SRV records has the host name last so the position is not
needed.
|
| |
| |
| |
| |
| | |
Note the duplicate 9 and 16 entries, neither of which are especially
relevant for our resolver usage.
|
| | |
|
| |
| |
| |
| |
| | |
Goal is to regenerate this file from the IANA registry using a tool.
Having it in a separate file will reduce vcs noise in util.dns
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
Probably worked anyway but settings might not always have been applied
depending on what order things happens in.
Error was hidden by the pcall, which was sorta intentional...
|
| |
| |
| |
| |
| | |
We break the SHOULD about the merged _xmpp and _xmpps SRV handling, but
we follow all the MUSTs
|
| |
| |
| |
| |
| |
| | |
When there are no records to return the return value from dns.lookup()
might be nil or might be a table containing zero records, depending on
which DNS library is used
|
| | |
|
| |
| |
| |
| | |
Since some of the titles are quite dense
|
| |
| |
| |
| |
| |
| | |
It is unexpected that 'example.com' matches 'exampleicom.org' and this
use of Lua patterns is undocumented and unlikely to be widely known or
used.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The Lua string.format %q doesn't behave correctly for all characters
that should be escaped in a quoted-string. And who knows what effects
higher Unicode might have here.
Applying percent-encoding of filenames seems like the safest way to deal
with filenames, as well as being easier than implementing the actual
quoted-string transform, which seems complicated and I'm not even sure
it covers every possible character.
Filenames can safely be assumed to be UTF-8 since they are passed in an
attribute in the query without any escaping.
|
| |
| |
| |
| |
| |
| | |
Stops an error when extra_labels is nil since it attempts to index it
Unsure about correctness
|
| | |
|
| | |
|
| |
| |
| |
| | |
It's what `gwl` in my vim did. Must be optimal then.
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
Fixes that a multi-line string ended up "like\
\9this" instead of "like\nthis" as can be demonstrated by somehow
initiating a connection to a HTTP server.
|
| |
| |
| |
| |
| | |
This should ensure any certificate needed for HTTP services will also be
included in the certificate import.
|
| | |
|
| |
| |
| |
| |
| | |
Since XEP-0363 is essentially mandatory now this will hopefully help
diagnose some common issues.
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Shortest first, then alphabetically, so that it prefers the base domain
over subdomains.
Fixes that it might otherwise pick a random sub-domain for filename on
each run, cluttering the certs directory and potentially tricking
Prosody into using an older certificate that might be about to expire.
|
| |
| |
| |
| |
| | |
Enables generation of summaries for more than Atom without additional
modules.
|
| | |
|
| |
| |
| |
| |
| |
| | |
This one takes a stanza as input
Roughly based on util.interpolation
|
| |
| |
| |
| |
| |
| | |
Allows using different ones even if multiple semantically different
formats share the same root element xmlns, e.g. generic Atom and
XEP-0277 entries.
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Relevant and sometimes needed for Direct TLS which mod_s2s uses this
context for. Primarily when e.g. mod_net_multiplex or equivalent ALPN
based dispatch is used.
All these contexts should likely move away from mod_tls and into either
mod_s2s or portmanager. The later already duplicates some of this work.
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
As in the argument to user:create() and user:roles()
Tricky to come up with something sensible to write when Prosody core
only knows of the 'prosody:admin' role so far.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
So that the same TLS context is used for both Direct TLS and starttls,
since they are supposed to be functionally identical apart from the few
extra round trips.
A new event is added because the 's2s-created' event fires much later,
after a connection has already been established, where we need the TLS
context before that.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Makes it faster by cutting out the roundtrips involved in <starttls/>,
at the cost of making an additional SRV lookup.
Since we already ignore a missing <starttls/> offer and try anyway there
is not much difference in security. The fact that XMPP is used and the
hostnames involved might still be visible until the future Encrypted
ClientHello extension allows hiding those too.
|
| |
| |
| |
| |
| |
| | |
Only allowing it to be passed directly makes it hard to combine plain
(i.e. starttls) and Direct TLS connections in the same connection
resolution procedure. But now we can, using chained resolvers!
|
| |
| |
| |
| | |
Say if you wanted to try both _xmpp and _xmpps services
|
|\| |
|