Kim Alvefur
|
1440be730c
|
mod_dialback: Short-circuit dialback auth if certificate is considered valid
|
2014-07-04 21:48:25 +02:00 |
|
Kim Alvefur
|
309f146764
|
mod_s2s: Fire a 's2s-created' event when new s2s connections are initialized
|
2014-05-24 11:17:26 +02:00 |
|
Kim Alvefur
|
a9cb63cf36
|
mod_s2s: Remove redundant setting of session.direction
|
2014-05-22 22:49:43 +02:00 |
|
Kim Alvefur
|
b4934b66b9
|
mod_s2s: Move filter initialization to common place
|
2014-05-22 22:48:06 +02:00 |
|
Kim Alvefur
|
6eef30829c
|
mod_s2s: Decide on log function once
|
2014-05-22 22:45:58 +02:00 |
|
Kim Alvefur
|
13d11d6735
|
mod_s2s: Follow XMPP Core on when a stream is to be considered ready
|
2014-04-22 21:56:06 +02:00 |
|
Kim Alvefur
|
5d015f7fb0
|
mod_s2s: Replace open_stream() with function that only adds s2s/dialback attributes to stream header
|
2014-04-18 07:51:41 +02:00 |
|
Kim Alvefur
|
3e9c8c8384
|
mod_s2s: Revert e626ee2fe106 change, it broke Dialback
|
2014-04-10 16:49:59 +02:00 |
|
Kim Alvefur
|
e06966ee43
|
mod_c2s, mod_s2s, mod_component, util.xmppstream: Move all session:open_stream() functions to util.xmppstream
|
2014-04-10 13:13:07 +02:00 |
|
Matthew Wild
|
e60a10abca
|
Merge 0.9->0.10
|
2014-01-12 06:19:37 -05:00 |
|
Florian Zeitz
|
92ee981cd1
|
mod_s2s: Include IP in log messages, if host is unavailable
|
2014-01-05 22:21:50 +01:00 |
|
Kim Alvefur
|
5178a1e79f
|
mod_c2s, mod_s2s: Set session.encrypted as session.secure does not allways mean encrypted (eg consider_bosh_secure)
|
2013-10-07 12:43:00 +02:00 |
|
Kim Alvefur
|
938d568ac4
|
mod_c2s, mod_s2s: Log cipher and encryption info in a more compact and (hopefully) less confusing way
|
2013-08-14 15:00:36 +02:00 |
|
Kim Alvefur
|
1764b9fba3
|
mod_s2s: Captitalize log messages that begin with a stream direction
|
2013-08-14 14:53:50 +02:00 |
|
Florian Zeitz
|
1d833bb807
|
Remove all trailing whitespace
|
2013-08-09 17:48:21 +02:00 |
|
Kim Alvefur
|
132f38d70a
|
Merge 0.9->trunk
|
2013-08-06 14:35:03 +02:00 |
|
Kim Alvefur
|
a316833b30
|
mod_admin_telnet, mod_s2s: Fix reporting of certificate chain validation details
|
2013-08-06 14:32:31 +02:00 |
|
Kim Alvefur
|
bb9aa809b1
|
mod_s2s: Improve policy check
|
2013-08-05 20:47:38 +02:00 |
|
Kim Alvefur
|
47ec51ca07
|
mod_s2s: Log certificate identity validation result
|
2013-08-04 17:33:00 +02:00 |
|
Kim Alvefur
|
0c6c0e9c29
|
mod_c2s, mod_s2s: Log a message that stream encryption has been enabled with some details
|
2013-08-02 15:12:24 +02:00 |
|
Kim Alvefur
|
74d66c5aef
|
mod_s2s: Add missing global hook for read-timeout
|
2013-06-26 13:35:38 +02:00 |
|
Kim Alvefur
|
4c9866805e
|
mod_c2s, mod_s2s: Fire an event on read timeouts
|
2013-06-11 21:36:15 +02:00 |
|
Kim Alvefur
|
a6d4b7ca4d
|
mod_s2s: Set s2s_session.ip
|
2013-06-09 12:54:10 +02:00 |
|
Kim Alvefur
|
8d85647c37
|
mod_c2s, mod_c2s: Send a whitespace on read timeout, to prod TCP into detecting if the connection died
|
2013-05-30 14:32:40 +02:00 |
|
Matthew Wild
|
2e3f198799
|
mod_s2s: Remove unnecessary debug message
|
2013-05-28 16:10:22 +01:00 |
|
Matthew Wild
|
bca009fef4
|
mod_s2s: Fix interaction between s2s_secure_auth and s2s_require_encryption, in particular ensure that when s2s_require_encryption is NOT set, do not require encryption on s2s_insecure_domains.
|
2013-05-18 12:02:25 +01:00 |
|
Matthew Wild
|
c596e86388
|
mod_s2s: Ensure that to/from on stream headers are always correct, fixes #338
|
2013-04-29 00:33:39 +01:00 |
|
Matthew Wild
|
de337196d4
|
mod_s2s: Obey tcp_keepalives option for s2s too, and make it individually configurable through s2s_tcp_keepalives (thanks yeled)
|
2013-04-26 12:25:25 +01:00 |
|
Matthew Wild
|
4602591c38
|
mod_c2s, mod_s2s, net.http, net.http.server: Improve tracebacks (omit traceback function), to make it clearer where an error occured
|
2013-04-22 12:35:52 +01:00 |
|
Kim Alvefur
|
001f4a7c75
|
mod_s2s: Add missing space
|
2013-04-15 19:37:15 +02:00 |
|
Kim Alvefur
|
dc7aae81cd
|
mod_s2s: Adjust priority of route/remote hooks to negative values (like most other internal hooks)
|
2013-04-08 22:42:38 +02:00 |
|
Kim Alvefur
|
28f67a8022
|
mod_s2s: Add COMPAT cahin verification code for older LuaSec versions
|
2013-04-04 19:21:47 +02:00 |
|
Matthew Wild
|
25bb94216d
|
mod_s2s: Close incoming s2s with stream error when secure and we don't trust their certificate
|
2013-04-01 14:45:59 +01:00 |
|
Kim Alvefur
|
cfbd9d02e2
|
mod_s2s: Prevent s2s to and from hosts we serve locally
|
2013-03-27 23:09:47 +01:00 |
|
Kim Alvefur
|
fee52c7341
|
mod_s2s: Prevent traceback when replying to incoming connection to a host we don't serve
|
2013-03-26 09:25:20 +01:00 |
|
Kim Alvefur
|
5c16f18d72
|
mod_s2s: session.from_host does not allways exist on incoming connections, true and nil or "our hostname" does not evaluate to what we want here
|
2013-03-25 08:18:49 +01:00 |
|
Matthew Wild
|
68a7de369b
|
mod_s2s: Fix variable usage in check_auth_policy (thanks Florob)
|
2013-03-22 15:16:22 +00:00 |
|
Matthew Wild
|
4ceaa9d2f2
|
mod_s2s: Remove unused variable
|
2013-03-22 14:31:14 +00:00 |
|
Matthew Wild
|
b8efb428ea
|
mod_s2s: Add controls for certificate validation via the s2s_secure_auth option. Plugins can now return false from handling s2s-check-certificate to prevent connection establishment (s2sin+s2sout)
|
2013-03-22 14:21:02 +00:00 |
|
Matthew Wild
|
339e74b1b9
|
s2smanager, mod_s2s, mod_dialback, mod_saslauth: Move s2smanager.make_authenticated() to mod_s2s, and plugins now signal authentication via the s2s-authenticated event
|
2013-03-22 14:18:23 +00:00 |
|
Kim Alvefur
|
ee9ef878c4
|
mod_s2s, mod_saslauth, mod_compression: Refactor to have common code for opening streams
|
2013-03-16 17:46:43 +01:00 |
|
Matthew Wild
|
740e6e69a2
|
mod_s2s: Do not include xmlns:db declaration in stream header if mod_dialback is not loaded
|
2013-03-12 12:30:08 +00:00 |
|
Kim Alvefur
|
404b1966b1
|
mod_s2s: Make sure host variable is reachable
|
2013-03-11 21:39:15 +01:00 |
|
Matthew Wild
|
a32c615bc8
|
mod_s2s: Fire s2s-check-certificate event after validating a certificate, to allow plugins to override standard procedure
|
2013-03-10 17:49:07 +00:00 |
|
Matthew Wild
|
f936068a62
|
mod_s2s, mod_dialback: Rename s2s-authenticate-legacy event to s2sout-authenticate-legacy for clarity. Also, hello!
|
2013-03-10 11:25:05 +00:00 |
|
Kim Alvefur
|
255bd1e311
|
mod_s2s: Don't try to close sessions that were destroyed before timeout
|
2013-01-24 00:59:32 +01:00 |
|
Kim Alvefur
|
3e2a8fbe1c
|
prosody, mod_c2s, mod_s2s: Move closing of c2s and s2s sessions to respective plugins
|
2012-12-28 14:33:47 +01:00 |
|
Matthew Wild
|
b9ac1b8b07
|
mod_s2s: Remove connection from sessions table as soon as we learn it is disconnected. Fixes a connection/session leak.
|
2012-12-28 12:47:44 +00:00 |
|
Kim Alvefur
|
b7219c57f4
|
mod_s2s: Detect TLS compression
|
2012-10-24 19:05:56 +02:00 |
|
Waqas Hussain
|
d9d38ef125
|
mod_{admin_telnet,c2s,component,http,net_multiplex,s2s}: Use module:provides() instead of module:add_item().
|
2012-09-12 22:22:31 +05:00 |
|