Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | core.certmanager: Move EECDH ciphers before EDH in default cipherstring ↵ | Kim Alvefur | 2019-08-25 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | (fixes #1513) Backport of 94e341dee51c The original intent of having kEDH before kEECDH was that if a `dhparam` file was specified, this would be interpreted as a preference by the admin for old and well-tested Diffie-Hellman key agreement over newer elliptic curve ones. Otherwise the faster elliptic curve ciphersuites would be preferred. This didn't really work as intended since this affects the ClientHello on outgoing s2s connections, leading to some servers using poorly configured kEDH. With Debian shipping OpenSSL settings that enforce a higher security level, this caused interoperability problems with servers that use DH params smaller than 2048 bits. E.g. jabber.org at the time of this writing has 1024 bit DH params. MattJ says > Curves have won, and OpenSSL is less weird about them now | ||||
* | core.certmanager: Look for privkey.pem to go with fullchain.pem (fix #1526) | Kim Alvefur | 2020-04-10 | 1 | -6/+8 |
| | | | | | | | This makes `prosodyctl cert import example.com /path/to/example.com/fullchain.pem` work. This was never intended to, yet users commonly tried this and got problems. | ||||
* | core.rostermanager: Cache rosters of offline users for faster access (fixes ↵ | Kim Alvefur | 2018-12-16 | 1 | -0/+22 |
| | | | | | | #1233) (grafted from 42a3e3a2824822cef7640ac56d182c59bdd4224e) | ||||
* | core.modulemanager: Disable mod_vcard if mod_vcard_legacy is enabled to ↵ | Kim Alvefur | 2019-11-23 | 1 | -0/+5 |
| | | | | prevent conflict (#1469) | ||||
* | core.portmanager: Log debug message for each kind of TLS context created | Kim Alvefur | 2019-04-23 | 1 | -0/+1 |
| | |||||
* | modulemanager: Fix issues introduced in previous commit acf74ad0b795 [thanks ↵ | Matthew Wild | 2018-10-26 | 1 | -7/+4 |
| | | | | luacheck, scansion] | ||||
* | Many things: switch from hacky multi-arg xpcall implementations to a ↵ | Matthew Wild | 2018-10-26 | 1 | -7/+2 |
| | | | | standard util.xpcall | ||||
* | moduleapi: Prevent loading disabled module as dependency of enabled one | Kim Alvefur | 2018-10-25 | 1 | -3/+3 |
| | | | | Explicitly disabled module should stay disabled. | ||||
* | stanza_router: Remove deprecation warning for core routing functions from ↵ | Kim Alvefur | 2018-10-21 | 1 | -10/+0 |
| | | | | global scope (deprecated in 0.9) | ||||
* | core.moduleapi: Remove redundant condition | Kim Alvefur | 2018-10-18 | 1 | -1/+1 |
| | |||||
* | rostermanager: Use util.id to generate ids for roster pushed | Matthew Wild | 2018-09-13 | 1 | -1/+3 |
| | |||||
* | configmanager: Allow referencing environment variables in the config as as ↵ | Matthew Wild | 2018-09-03 | 1 | -2/+5 |
| | | | | ENV_<name> | ||||
* | moduleapi: Remove multiple-parameters feature from module:shared() | Matthew Wild | 2018-08-08 | 1 | -25/+24 |
| | | | | | | Multiple paths are rarely used, and leads to less clear code than just calling module:shared() once per shared table. It also prevents us from extending the API with new parameters in the future. | ||||
* | sessionmanager, mod_s2s: Bring debug line for outgoing stanzas in line with ↵ | Kim Alvefur | 2018-07-24 | 1 | -1/+1 |
| | | | | that for incoming | ||||
* | core.stanza_router: Reduce logging of common routing (#776) | Kim Alvefur | 2018-07-22 | 1 | -2/+1 |
| | |||||
* | sessionmanager: Log top tag of outgoing stanzas on c2s (#776) | Kim Alvefur | 2018-07-22 | 1 | -0/+1 |
| | |||||
* | moduleapi: Use :send API from :broadcast for compactness | Kim Alvefur | 2018-07-14 | 1 | -1/+1 |
| | |||||
* | moduleapi: Lazy-load statsmanager on demand | Kim Alvefur | 2018-07-07 | 1 | -1/+1 |
| | |||||
* | moduleapi: Lazy-load configmanager on demand simplify dependency graph | Kim Alvefur | 2018-07-07 | 1 | -1/+1 |
| | |||||
* | modulemanager: Expose function to get the list of modules that should be ↵ | Matthew Wild | 2018-06-20 | 1 | -4/+13 |
| | | | | loaded on a host | ||||
* | sessionmanager: Generate shorter random resoures | Kim Alvefur | 2018-05-29 | 1 | -3/+3 |
| | |||||
* | Merge 0.10->trunk | Kim Alvefur | 2018-05-25 | 1 | -1/+1 |
|\ | |||||
| * | core.certmanager: Allow all non-whitespace in service name (fixes #1019) | Kim Alvefur | 2018-05-25 | 1 | -1/+1 |
| | | |||||
* | | loggingmanager: Remove luacheck annotations for global log functions that ↵ | Kim Alvefur | 2018-04-10 | 1 | -1/+0 |
| | | | | | | | | are now set in util.startup | ||||
* | | util.startup: Set up event hooks for reloading logging here instead of in ↵ | Kim Alvefur | 2018-04-05 | 1 | -6/+0 |
| | | | | | | | | loggingmanager to simplify startup dependencies | ||||
* | | util.startup: Initialize prosody.log / _G.log here instead of in ↵ | Kim Alvefur | 2018-04-05 | 1 | -3/+0 |
| | | | | | | | | loggingmanager to reduce dependencies | ||||
* | | core: Use prosody.hosts instead of _G.hosts for consistency | Kim Alvefur | 2018-03-29 | 5 | -5/+5 |
| | | |||||
* | | loggingmanager: Hook event for reopening log files instead of config reloaded | Kim Alvefur | 2018-03-25 | 1 | -1/+1 |
| | | |||||
* | | configmanager: Move firing of the 'config-reloaded' event into util.startup ↵ | Kim Alvefur | 2018-03-25 | 1 | -7/+0 |
| | | | | | | | | (fixes #1117) | ||||
* | | storagemanager: Default storage_async_check to false for a while | Matthew Wild | 2018-03-25 | 1 | -1/+1 |
| | | |||||
* | | stanza_router: Limit scope of deprecated warning function since it is not ↵ | Kim Alvefur | 2018-03-23 | 1 | -1/+1 |
| | | | | | | | | used anywhere else [luacheck] | ||||
* | | s2smanager: Explicitly export the incoming_s2s table [luacheck] | Kim Alvefur | 2018-03-23 | 1 | -2/+2 |
| | | |||||
* | | storagemanager: Remove unused variable [luacheck] | Kim Alvefur | 2018-03-22 | 1 | -1/+1 |
| | | |||||
* | | storagemanager: Log warning on storage access outside of async contexts | Matthew Wild | 2018-03-22 | 1 | -0/+32 |
| | | |||||
* | | Merge 0.10->trunk | Kim Alvefur | 2018-03-06 | 1 | -0/+3 |
|\| | |||||
| * | hostmanager: Add a logging close method in case something tries to close the ↵ | Kim Alvefur | 2018-02-24 | 1 | -0/+3 |
| | | | | | | | | origin of local-originated stanzas (see #1084) | ||||
* | | vairious: Add annotation when an empty environment is set [luacheck] | Kim Alvefur | 2018-02-28 | 11 | -0/+11 |
| | | |||||
* | | moduleapi: Remove unused and undocumented :has_feature and :has_identity | Kim Alvefur | 2018-02-23 | 1 | -14/+0 |
| | | |||||
* | | Merge 0.10->trunk | Kim Alvefur | 2017-12-29 | 1 | -0/+8 |
|\| | |||||
| * | rostermanager: Explicitly remove old-style 'pending' table from rosters (or ↵ | Kim Alvefur | 2017-12-29 | 1 | -0/+8 |
| | | | | | | | | it stays forever due to map stores) | ||||
* | | Merge 0.10->trunk | Kim Alvefur | 2017-12-28 | 1 | -1/+1 |
|\| | |||||
| * | certmanager: Check for missing certificate before key in configuration ↵ | Kim Alvefur | 2017-12-28 | 1 | -1/+1 |
| | | | | | | | | (should be marginally less confusing) | ||||
* | | moduleapi: Warn if a module being loaded as a dependency has been disabled | Kim Alvefur | 2017-12-27 | 1 | -0/+3 |
| | | |||||
* | | Merge 0.10->trunk | Kim Alvefur | 2017-11-20 | 1 | -14/+33 |
|\| | |||||
| * | certmanager: Set single curve conditioned on LuaSec advertising EC crypto ↵ | Kim Alvefur | 2017-11-20 | 1 | -1/+1 |
| | | | | | | | | support | ||||
| * | certmanager: Filter out curves not supported by LuaSec | Kim Alvefur | 2017-11-20 | 1 | -0/+12 |
| | | |||||
| * | certmanager: Change table representing LuaSec capabilities to match ↵ | Kim Alvefur | 2017-11-20 | 1 | -13/+20 |
| | | | | | | | | capabilities table exposed in LuaSec 0.7 | ||||
* | | Merge 0.10->trunk | Kim Alvefur | 2017-10-29 | 2 | -4/+7 |
|\| | |||||
| * | rostermanager: Log warning if removal self-contact failed | Kim Alvefur | 2017-10-29 | 1 | -1/+3 |
| | | |||||
| * | rostermanager: Use internal method for storing removal of self-contact | Kim Alvefur | 2017-10-29 | 1 | -1/+1 |
| | |