Commit graph

22 commits

Author SHA1 Message Date
Kim Alvefur
b8e4d5e840 util.x509: Per RFC 9525, remove obsolete Common Name check 2024-02-11 13:34:13 +01:00
Kim Alvefur
43531740f9 util: Prefix module imports with prosody namespace 2023-03-17 16:23:16 +01:00
Kim Alvefur
62f32cd01d Revert unintentionally committed parts of 12bd40b8e105 2022-12-21 21:34:07 +01:00
Kim Alvefur
a46ae8cb89 mod_c2s,mod_s2s: Adapt to XEP-xxxx: Stream Limits Advertisement
Thanks MattJ
2022-10-20 14:04:56 +02:00
Kim Alvefur
93830ecf40 various: Update IETF RFC URLs for tools.ietf.org transition
See https://www.ietf.org/blog/finalizing-ietf-tools-transition/

Already done in various other places.
2022-08-05 16:54:15 +02:00
Kim Alvefur
1f4fb79d2e util.x509: Fix to include wildcard identity 2021-12-22 15:32:04 +01:00
Kim Alvefur
5ba23c972b util.x509: Fix recording of CommonNames in get_identities
Don't worry, this function is not used by anything yet, this isn't a
security issue. It'll be used by Prosody to pick the correct certificate
for itself in the future.

The `names` multitable is a collection of (name, service) pairs but it
put them in the wrong order here.
2019-12-08 17:48:37 +01:00
Kim Alvefur
6a6b2fedce util.x509: Return sets of services per identity 2019-09-10 18:41:36 +02:00
Kim Alvefur
833d955c39 util.x509: Only collect commonNames that pass idna
Weeds out "Example Certificate" and the like, which are uninteresting
for this function.
2019-09-10 18:17:13 +02:00
Kim Alvefur
4caae04421 util.x509: Nameprep commonName once 2019-09-10 18:16:11 +02:00
Kim Alvefur
5ba20f8a9b util.x509: Add function that extracts usable names from a certificate 2019-01-04 10:20:51 +01:00
Kim Alvefur
43b814a83b vairious: Add annotation when an empty environment is set [luacheck] 2018-02-28 20:06:26 +01:00
Kim Alvefur
eaa823a597 util.*: Remove use of module() function, make all module functions local and return them in a table at the end 2015-02-21 10:36:37 +01:00
Kim Alvefur
bac4a10b34 util.x509: Tell LuaSec we want UTF-8 data 2015-05-18 21:32:05 +02:00
Kim Alvefur
2e78da6434 util.x509: Remove unused imports 2014-04-25 02:47:09 +02:00
Kim Alvefur
0a930566b3 util.x509: And functions for converting between DER and PEM 2014-04-24 23:38:47 +02:00
Kim Alvefur
be672f8a37 util.x509: Only compare identity with oid-on-xmppAddr for XMPP services 2013-09-26 16:55:39 +02:00
Kim Alvefur
c0475404c9 util.x509: Remove logic for generating certificate configs 2012-05-09 00:34:24 +02:00
Kim Alvefur
26b4718148 user.x509: Add some utility functions for generating OpenSSL configs 2012-01-20 21:59:13 +01:00
Paul Aurich
03422d0c34 util.x509: Update references to published RFCs
For TLS-CERTS, see http://tools.ietf.org/rfcdiff?url1=draft-saintandre-tls-server-id-check-10.txt&url2=rfc6125.txt
2011-05-22 14:06:18 -07:00
Waqas Hussain
0c43b50b88 util.x509: "certverification" -> "x509". 2010-12-12 06:25:54 +05:00
Kim Alvefur
49298b499e core.s2smanager, mod_console, mod_saslauth, util.certverification: rename util.certverification to util.x509 2010-12-12 02:03:32 +01:00
Renamed from util/certverification.lua (Browse further)