| Commit message (Expand) | Author | Age | Files | Lines |
* | core.certmanager: Handle dane context setting same way on reload as on initia... | Kim Alvefur | 2023-11-04 | 1 | -1/+7 |
* | core.certmanager: Tweak log level of message about SNI being required | Kim Alvefur | 2023-10-29 | 1 | -1/+1 |
* | Merge 0.12->trunk | Kim Alvefur | 2023-10-27 | 1 | -1/+4 |
|\ |
|
| * | core.certmanager: Validate that 'tls_profile' is one of the valid values | Kim Alvefur | 2023-10-27 | 1 | -1/+4 |
* | | Merge 0.12->trunk | Kim Alvefur | 2023-07-10 | 1 | -1/+2 |
|\| |
|
| * | core.certmanager: Update Mozilla TLS config to version 5.7 | Kim Alvefur | 2023-07-09 | 1 | -1/+2 |
* | | net.tls_luasec: Expose method for loading a certificate | Kim Alvefur | 2023-05-27 | 1 | -2/+1 |
* | | net.certmanager: Move LuaSec feature detection to net.tls_luasec | Kim Alvefur | 2023-05-27 | 1 | -35/+12 |
* | | core: Prefix module imports with prosody namespace | Kim Alvefur | 2023-03-17 | 1 | -5/+5 |
* | | Merge 0.12->trunk | Kim Alvefur | 2022-05-16 | 1 | -2/+2 |
|\| |
|
| * | core.certmanager: Expand debug messages about cert lookups in index | Kim Alvefur | 2022-05-16 | 1 | -2/+2 |
* | | net: refactor sslconfig to not depend on LuaSec | Jonas Schäfer | 2022-04-02 | 1 | -1/+1 |
* | | net: isolate LuaSec-specifics | Jonas Schäfer | 2022-04-27 | 1 | -33/+1 |
|/ |
|
* | Merge config-updates+check-turn from timber | Matthew Wild | 2022-03-04 | 1 | -13/+3 |
|\ |
|
| * | core.certmanager: Turn soft dependency on LuaSec into a hard | Kim Alvefur | 2022-02-10 | 1 | -13/+3 |
* | | core.certmanager: Ensure key exists for fullchain | Kim Alvefur | 2022-02-21 | 1 | -1/+1 |
|/ |
|
* | core.certmanager: Relax certificate filename check #1713 | Kim Alvefur | 2022-02-14 | 1 | -8/+2 |
* | core.certmanager: Use 'tls_profile' instead of 'tls_preset' to match document... | Kim Alvefur | 2022-01-18 | 1 | -3/+3 |
* | core.certmanager: Apply TLS preset before global settings (thanks Menel) | Kim Alvefur | 2022-01-18 | 1 | -1/+1 |
* | core.certmanager: Disable DANE name checks (not needed for XMPP) | Kim Alvefur | 2021-09-16 | 1 | -1/+1 |
* | core.certmanager: Add curveslist to 'old' Mozilla TLS preset | Kim Alvefur | 2021-12-26 | 1 | -1/+2 |
* | core.certmanager: Check index for wildcard certs | Kim Alvefur | 2021-12-22 | 1 | -1/+2 |
* | prosodyctl cert: use the indexing functions for better UX | Jonas Schäfer | 2021-12-21 | 1 | -6/+14 |
* | core.certmanager: Rename preset option to 'tls_preset' | Kim Alvefur | 2021-12-22 | 1 | -1/+1 |
* | core.certmanager: Add "legacy" preset for keeping previous default settings | Kim Alvefur | 2021-12-22 | 1 | -1/+3 |
* | core.certmanager: Add TLS 1.3 cipher suites to Mozilla TLS presets | Kim Alvefur | 2021-11-03 | 1 | -1/+7 |
* | core.certmanager: Presets based on Mozilla SSL Configuration Generator | Kim Alvefur | 2019-12-22 | 1 | -0/+60 |
* | core.certmanager: Support 'use_dane' setting to enable DANE support | Kim Alvefur | 2021-07-18 | 1 | -0/+2 |
* | core.certmanager: Skip service certificate lookup for https client | Kim Alvefur | 2021-05-27 | 1 | -1/+2 |
* | Merge 0.11->trunk | Matthew Wild | 2021-05-13 | 1 | -9/+12 |
|\ |
|
| * | certmanager: Disable renegotiation by default | Matthew Wild | 2021-05-11 | 1 | -0/+2 |
| * | core.certmanager: Test for SSL options in absence of LuaSec config | Kim Alvefur | 2021-04-26 | 1 | -5/+9 |
| * | core.certmanager: Attempt to directly access LuaSec config table | Kim Alvefur | 2021-04-26 | 1 | -1/+1 |
| * | core.certmanager: Move EECDH ciphers before EDH in default cipherstring (fixe... | Kim Alvefur | 2019-08-25 | 1 | -1/+1 |
* | | core.certmanager: Catch error from lfs | Kim Alvefur | 2021-05-07 | 1 | -1/+11 |
* | | core.certmanager: Resolve certs path relative to config dir | Kim Alvefur | 2021-05-07 | 1 | -3/+3 |
* | | core.certmanager: Skip directly to guessing of key from cert filename | Kim Alvefur | 2021-05-05 | 1 | -2/+17 |
* | | core.certmanager: Join paths with OS-aware util.paths function | Kim Alvefur | 2021-05-05 | 1 | -2/+3 |
* | | core.certmanager: Build an index over certificates | Kim Alvefur | 2021-04-10 | 1 | -0/+79 |
* | | core.certmanager: Check for complete filename | Kim Alvefur | 2021-04-10 | 1 | -1/+1 |
* | | core.certmanager: Add comments explaining the 'verifyext' TLS settings | Kim Alvefur | 2021-02-06 | 1 | -1/+4 |
* | | core.certmanager: Add TODO about LuaSec issue | Kim Alvefur | 2020-06-07 | 1 | -0/+3 |
* | | Merge 0.11->trunk | Kim Alvefur | 2020-04-10 | 1 | -6/+8 |
|\| |
|
| * | core.certmanager: Look for privkey.pem to go with fullchain.pem (fix #1526) | Kim Alvefur | 2020-04-10 | 1 | -6/+8 |
* | | core.portmanager: Fix TLS context inheritance for SNI hosts (completes SNI su... | Kim Alvefur | 2019-11-29 | 1 | -0/+1 |
* | | core.certmanager: Lower severity for tls config not having cert | Kim Alvefur | 2019-09-07 | 1 | -2/+4 |
* | | core.certmanager: Remove unused import [luacheck] | Kim Alvefur | 2019-08-25 | 1 | -1/+0 |
* | | Remove COMPAT with temporary luasec fork | Kim Alvefur | 2019-08-25 | 1 | -7/+0 |
* | | core.certmanager: Move EECDH ciphers before EDH in default cipherstring | Kim Alvefur | 2019-08-25 | 1 | -1/+1 |
* | | core.certmanager: Do not ask for client certificates by default | Kim Alvefur | 2019-03-10 | 1 | -1/+1 |
|/ |
|