aboutsummaryrefslogtreecommitdiffstats
path: root/core
Commit message (Collapse)AuthorAgeFilesLines
* Merge 0.10->trunkMatthew Wild2014-04-021-1/+3
|\
| * Merge 0.9->0.10Matthew Wild2014-04-0213-132/+150
| |\
| * | portmanager: Make maximum read size configurable, and default to 4KBMatthew Wild2014-03-301-1/+3
| | |
* | | Merge 0.10->trunkKim Alvefur2014-03-251-1/+1
|\ \ \ | | |/ | |/|
| * | Merge 0.9->0.10Kim Alvefur2014-03-251-1/+1
| |\|
| | * modulemanager: Load mod_saslauth on components by defaultKim Alvefur2014-03-221-1/+1
| | |
* | | Merge 0.10->trunkKim Alvefur2014-02-031-1/+1
|\| |
| * | modulemanager: Always load a platform-specific module, add stub modules for ↵Kim Alvefur2014-01-261-1/+1
| | | | | | | | | | | | Windows and unknown platforms
* | | Merge 0.10->trunkMatthew Wild2013-11-211-1/+1
|\| |
| * | Merge 0.9->0.10Matthew Wild2013-11-211-1/+1
| |\|
| | * certmanager: Further cipher string tweaking. Re-enable ciphers required for ↵Matthew Wild2013-11-211-1/+1
| | | | | | | | | | | | DSA and ECDH certs/keys.
| | * Back out 1b0ac7950129, as SSLv3 appears to still be in moderate use on the ↵Matthew Wild2013-11-121-1/+1
| | | | | | | | | | | | network. Also, although obsolete, SSLv3 isn't documented to have any weaknesses that TLS 1.0 (the most common version used today) doesn't also have. Get your act together clients!
* | | Merge 0.10->trunkMatthew Wild2013-11-101-1/+1
|\| |
| * | Merge 0.9->0.10Matthew Wild2013-11-101-1/+1
| |\|
| | * certmanager: Update default cipher string to prefer forward-secrecy over ↵Matthew Wild2013-11-101-1/+1
| | | | | | | | | | | | cipher strength and to disable triple-DES (weaker and much slower than AES)
* | | Merge 0.10->trunkMatthew Wild2013-11-091-1/+1
|\| |
| * | Merge 0.9->0.10Matthew Wild2013-11-091-1/+1
| |\|
| | * certmanager: Fix order of options, so that the dynamic option is at the end ↵Matthew Wild2013-11-091-1/+1
| | | | | | | | | | | | of the array
| | * certmanager: Default to using the server's cipher preference order by ↵Matthew Wild2013-11-091-1/+1
| | | | | | | | | | | | default, as clients have been shown to commonly select weak and insecure ciphers even when they support stronger ones
* | | core.moduleapi: Fix some global accesses.Waqas Hussain2013-11-061-2/+3
| | |
* | | core/moduleapi: Return timer object from module:add_timerdaurnimator2013-11-061-5/+24
|/ /
* | Merge 0.9 -> 0.10Kim Alvefur2013-10-311-1/+1
|\|
| * certmanager: Disable SSLv3 by defaultKim Alvefur2013-10-311-1/+1
| |
| * certmanager: Fix dhparam callback, missing imports (Testing, pfft)Kim Alvefur2013-09-031-3/+5
| |
| * certmanager: Allow for specifying the dhparam option as a path to a file ↵Kim Alvefur2013-09-031-0/+11
| | | | | | | | instead of a callback
| * certmanager: Fix for working around a bug with LuaSec 0.4.1 that causes it ↵Matthew Wild2013-09-031-4/+4
| | | | | | | | to not honour the 'ciphers' option. This change will apply 0.9's default cipher string for LuaSec 0.4.1 users.
* | certmanager: Fix. Again.Kim Alvefur2013-10-151-2/+2
| |
* | certmanager: Add back single_dh_use and single_ecdh_use to default options ↵Kim Alvefur2013-10-151-2/+6
| | | | | | | | (Zash breaks, Zash unbreaks)
* | moduleapi: Add module:unhook()Matthew Wild2013-09-161-0/+4
| |
* | certmanager: Allow for specifying the dhparam option as a path to a file ↵Kim Alvefur2013-09-031-2/+17
| | | | | | | | instead of a callback
* | Merge 0.9->trunkMatthew Wild2013-09-031-1/+1
|\|
| * configmanager: Fix checking of absolute paths on WindowsKim Alvefur2013-08-301-1/+1
| |
* | usermanager: Remove unused import of pairs()Matthew Wild2013-08-131-1/+0
| |
* | Remove all trailing whitespaceFlorian Zeitz2013-08-0913-86/+86
| |
* | moduleapi: module:get_host_type() now returns 'global' for * and 'local' for ↵Matthew Wild2013-08-061-1/+1
| | | | | | | | non-components
* | rostermanager, mod_groups: Change roster-load event to pass an event table ↵Matthew Wild2013-07-151-1/+1
| | | | | | | | for consistency
* | Merge 0.9->trunkMatthew Wild2013-07-131-0/+1
|\|
| * certmanager: Set our own default cipher string, which includes only ciphers ↵Matthew Wild2013-07-131-0/+1
| | | | | | | | regarded as 'HIGH' strength (by OpenSSL). In particular this disables RC4.
* | certmanager: Overhaul of how ssl configs are built.Kim Alvefur2013-06-131-38/+45
| |
* | Merge 0.9->trunkMatthew Wild2013-06-131-0/+5
|\|
| * certmanager: Add single_dh_use and single_ecdh_use to default optionsMatthew Wild2013-06-131-0/+5
| |
* | Merge 0.9->trunkMatthew Wild2013-06-131-1/+1
|\|
| * certmanager: Set ssl.curve to 'secp384r1' by default, to enable ECC ciphersMatthew Wild2013-06-131-1/+1
| |
* | Merge 0.9->trunkMatthew Wild2013-06-111-0/+2
|\|
| * certmanager: Use 'curve' and 'dhparam' options from ssl config if presentMatthew Wild2013-06-111-0/+2
| |
* | certmanager: Complain if key or certificate is missing from SSL config.Kim Alvefur2013-06-071-0/+2
|/
* certmanager: Disable SSL compression if possible (LuaSec 0.5 or ↵Matthew Wild2013-05-221-1/+5
| | | | 0.4.1+OpenSSL 1.x)
* portmanager: Also include the interface the service is listening onKim Alvefur2013-04-291-1/+1
|
* portmanager: Include port numbers the service is listening on in the info logs.Waqas Hussain2013-04-291-1/+3
|
* moduleapi: in module:provides(), add the name of the module in item._provided_byKim Alvefur2013-04-271-0/+1
|