Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | portmanager: Expose API to get at SSL/TLS config for a given interface/port | Matthew Wild | 2022-09-07 | 1 | -0/+8 |
| | |||||
* | core.portmanager: Join strings broken into multiple lines | Kim Alvefur | 2023-07-29 | 1 | -6/+3 |
| | | | | | | | Improves readability. Reduces line count. What's not to like? The code style and luacheck rules allows longer lines, and these strings aren't long enough to need breaking into multiple lines like this. | ||||
* | core.portmanager: Hint at HTTP servers for conflicts over port 443 | Kim Alvefur | 2023-07-29 | 1 | -1/+1 |
| | | | | | | Since 443 is just as much a web port as port 80 these days, if not more. What's with port 81 here? | ||||
* | core: Prefix module imports with prosody namespace | Kim Alvefur | 2023-03-17 | 1 | -6/+6 |
| | |||||
* | net: isolate LuaSec-specifics | Jonas Schäfer | 2022-04-27 | 1 | -10/+11 |
| | | | | | | | | | | | | | | For this, various accessor functions are now provided directly on the sockets, which reach down into the LuaSec implementation to obtain the information. While this may seem of little gain at first, it hides the implementation detail of the LuaSec+LuaSocket combination that the actual socket and the TLS layer are separate objects. The net gain here is that an alternative implementation does not have to emulate that specific implementation detail and "only" has to expose LuaSec-compatible data structures on the new functions. | ||||
* | core.portmanager: Fix traceback on attempt to get non-existent service | Kim Alvefur | 2022-02-22 | 1 | -1/+3 |
| | | | | | If there's no such interface:port then `data` is nil and `data.service` errors. | ||||
* | core.portmanager: Also reload per-SNI certificates | Kim Alvefur | 2021-06-10 | 1 | -1/+3 |
| | |||||
* | core.portmanager: Reload direct TLS certificates after config reload | Kim Alvefur | 2021-06-10 | 1 | -0/+21 |
| | | | | | This should re-create all contexts the same way as when the service was activated, which reloads certificates. | ||||
* | core.portmanager: Factor out base TLS context creation for reuse | Kim Alvefur | 2021-06-10 | 1 | -10/+15 |
| | | | | Thinking I can use this to reload certificates after config reload | ||||
* | core.portmanager: Fix race condition in initialization of SNI cert map | Kim Alvefur | 2021-05-28 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | | Under some circumstances when hosts and modules are loaded in some certain order, entries end up missing from the SNI map. This manifests in e.g. `curl https://localhost:5281/` giving an error about "unrecognized name". The `service` argument is `nil` when invoked from the "host-activated" event, leading it to iterating over every service. And then it would not be fetching e.g. `http_host` from the config, which explains why https would sometimes not work due to the missing name entry. Because when `service` is included, this limits the iteration to matching entries, while also returning the same value as the `name` loop variable. Because `name == service when service != nil` we can use name instead in the body of the loop. | ||||
* | core.portmanager: Use existing http_host for https SNI mapping | Kim Alvefur | 2021-05-05 | 1 | -0/+4 |
| | |||||
* | core.portmanager: Allow overriding expected SNI name per service | Kim Alvefur | 2021-05-05 | 1 | -2/+3 |
| | | | | | | | E.g. VirtualHost"example.com" https_name = "xmpp.example.com" | ||||
* | core.portmanager: Log SNI hosts, services looked for | Kim Alvefur | 2021-03-02 | 1 | -0/+1 |
| | | | | To highlight how many these are | ||||
* | portmanager: Don't auto-start network services under prosodyctl | Matthew Wild | 2020-02-05 | 1 | -1/+1 |
| | |||||
* | core.portmanager: Ignore unused return variable [luacheck] | Kim Alvefur | 2019-12-23 | 1 | -0/+1 |
| | |||||
* | core.portmanager: Complete error message for SNI TLS context problems | Kim Alvefur | 2019-11-30 | 1 | -1/+1 |
| | |||||
* | core.portmanager: Fix TLS context inheritance for SNI hosts (completes SNI ↵ | Kim Alvefur | 2019-11-29 | 1 | -10/+5 |
| | | | | support) | ||||
* | core.portmanager: Don't set the first TLS context with a cert as main context | Kim Alvefur | 2019-11-29 | 1 | -4/+0 |
| | | | | Don't think this works and it's apparently acceptable to require SNI these days. | ||||
* | core.portmanager: Remove unused local [luacheck] | Kim Alvefur | 2019-07-30 | 1 | -1/+1 |
| | |||||
* | core.portmanager: Remove tostring call from logging | Kim Alvefur | 2019-07-30 | 1 | -1/+1 |
| | | | | Taken care of by loggingmanager now | ||||
* | Merge 0.11->trunk | Kim Alvefur | 2019-04-24 | 1 | -1/+1 |
|\ | |||||
| * | core.portmanager: Log debug message for each kind of TLS context created | Kim Alvefur | 2019-04-23 | 1 | -0/+1 |
| | | |||||
* | | core.portmanager: Collect per-host certificates for SNI | Kim Alvefur | 2018-09-14 | 1 | -0/+41 |
| | | |||||
* | | core.portmanager: Record TLS config for each port | Kim Alvefur | 2018-10-10 | 1 | -2/+4 |
| | | |||||
* | | core.portmanager: Reduce scope of variable | Kim Alvefur | 2018-10-10 | 1 | -2/+2 |
| | | | | | | | | | | Not sure why it was all the way out there, seems like there would have been unexpected behaviour from that | ||||
* | | core.portmanager: Use server.listen API | Kim Alvefur | 2018-09-13 | 1 | -1/+5 |
|/ | |||||
* | vairious: Add annotation when an empty environment is set [luacheck] | Kim Alvefur | 2018-02-28 | 1 | -0/+1 |
| | |||||
* | core: Split some very long lines [luacheck] | Kim Alvefur | 2017-03-04 | 1 | -4/+8 |
| | |||||
* | portmanager: Set default read size back to 4K | Kim Alvefur | 2016-05-04 | 1 | -1/+1 |
| | |||||
* | Merge 0.9->0.10 | Kim Alvefur | 2016-01-11 | 1 | -1/+1 |
|\ | |||||
| * | core: Increase default read size to "all of it", in practice 8K (size of ↵ | Kim Alvefur | 2016-01-10 | 1 | -1/+1 |
| | | | | | | | | LuaSockets buffer) | ||||
* | | portmanager: Lower the priority of module-supplied TLS options | Kim Alvefur | 2015-12-08 | 1 | -1/+1 |
| | | |||||
* | | portmanager: Add forward declarations | Kim Alvefur | 2015-04-08 | 1 | -2/+6 |
| | | |||||
* | | core.*: Remove use of module() function | Kim Alvefur | 2015-02-21 | 1 | -20/+32 |
| | | |||||
* | | portmanager: Remove unused argument from function [luacheck] | Matthew Wild | 2015-05-13 | 1 | -1/+1 |
| | | |||||
* | | portmanager: Rename variable to avoid name conflict [luacheck] | Matthew Wild | 2015-05-13 | 1 | -2/+2 |
| | | |||||
* | | portmanager: Add luacheck annotations | Matthew Wild | 2015-05-13 | 1 | -1/+1 |
| | | |||||
* | | portmanager, s2smanager, sessionmanager, stanza_router, storagemanager, ↵ | Matthew Wild | 2015-05-06 | 1 | -1/+1 |
| | | | | | | | | usermanager, util.xml: Add luacheck annotations | ||||
* | | portmanager: Remove unused import of pairs() | Matthew Wild | 2015-01-20 | 1 | -1/+1 |
| | | |||||
* | | core.portmanager: Simplify and take advantage of new ssl config merging in ↵ | Kim Alvefur | 2014-07-03 | 1 | -28/+9 |
| | | | | | | | | certmanager | ||||
* | | Merge 0.9->0.10 | Matthew Wild | 2014-04-02 | 1 | -4/+4 |
|\ \ | |/ |/| | |||||
| * | Remove all trailing whitespace | Florian Zeitz | 2013-08-09 | 1 | -4/+4 |
| | | |||||
* | | portmanager: Make maximum read size configurable, and default to 4KB | Matthew Wild | 2014-03-30 | 1 | -1/+3 |
|/ | |||||
* | portmanager: Also include the interface the service is listening on | Kim Alvefur | 2013-04-29 | 1 | -1/+1 |
| | |||||
* | portmanager: Include port numbers the service is listening on in the info logs. | Waqas Hussain | 2013-04-29 | 1 | -1/+3 |
| | |||||
* | portmanager: import pairs() (thanks Maranda) | Matthew Wild | 2013-04-05 | 1 | -1/+1 |
| | |||||
* | portmanager: add logic to allow specification of service default values for ↵ | Marco Cirillo | 2013-04-04 | 1 | -3/+28 |
| | | | | ssl config and / or overrides. | ||||
* | portmanager: Log error and fail to bind when port is invalid (not a number) | Matthew Wild | 2013-03-31 | 1 | -9/+11 |
| | |||||
* | portmanager: Add use_ipv4 option, default to true. | Kim Alvefur | 2013-03-27 | 1 | -2/+6 |
| | |||||
* | portmanager: use_ipv6 defaults to true if luasocket has ipv6 support | Kim Alvefur | 2013-03-27 | 1 | -1/+2 |
| |