Commit graph

13 commits

Author SHA1 Message Date
Kim Alvefur
c0a3026414 mod_s2s_auth_certs: Handle potential string error
conn:ssl_peerverification() can now return a single error in case the
connection has been closed for whatever reason
2024-02-21 21:29:16 +01:00
Kim Alvefur
ae884642d5 mod_s2s_auth_certs: Remove LuaSec compat that moved to net.server 2023-11-04 17:12:01 +01:00
Kim Alvefur
98922d54b1 plugins: Prefix module imports with prosody namespace 2023-03-24 13:15:28 +01:00
Kim Alvefur
85ff75c53f mod_s2s_auth_certs: Validate certificates against secure SRV targets
Secure delegation or "Mini-DANE"

As with the existing DANE support, only usable in one direction, client
certificate authentication will fail if this is relied on.
2022-12-22 00:13:37 +01:00
Kim Alvefur
62f32cd01d Revert unintentionally committed parts of 12bd40b8e105 2022-12-21 21:34:07 +01:00
Kim Alvefur
a46ae8cb89 mod_c2s,mod_s2s: Adapt to XEP-xxxx: Stream Limits Advertisement
Thanks MattJ
2022-10-20 14:04:56 +02:00
Jonas Schäfer
38346dd6f1 net: isolate LuaSec-specifics
For this, various accessor functions are now provided directly on the
sockets, which reach down into the LuaSec implementation to obtain the
information.

While this may seem of little gain at first, it hides the implementation
detail of the LuaSec+LuaSocket combination that the actual socket and
the TLS layer are separate objects.

The net gain here is that an alternative implementation does not have to
emulate that specific implementation detail and "only" has to expose
LuaSec-compatible data structures on the new functions.
2022-04-27 17:44:14 +02:00
Kim Alvefur
cc49e02cae mod_s2s_auth_certs: Collect stats on validation results (for #975) 2021-10-05 16:30:41 +02:00
Kim Alvefur
f864eaf14f mod_s2s_auth_certs: Save chain validation errors for later use 2019-11-27 23:23:25 +01:00
Kim Alvefur
b16782257d Remove COMPAT with temporary luasec fork
The changes in the temporary fork were merged into mainline luasec ca
2013 and included in the 0.5 release in 2014.
2019-08-25 23:12:55 +02:00
Kim Alvefur
899b61ad0f mod_s2s_auth_certs: Warn about lack of certificate (Mostly jabberd14 not sending a client certificate) 2014-08-29 02:24:49 +02:00
Kim Alvefur
a960fa32ac mod_s2s_auth_certs: Pick a logging function once and stick with it 2014-07-25 21:03:16 +02:00
Kim Alvefur
bd17040999 mod_s2s_auth_certs: Split PKIX based certificate checking from mod_s2s into new plugin 2014-07-25 20:41:54 +02:00