util.prosodyctl.cert: Look for certificates in a consistent order Shortest first, then alphabetically, so that it prefers the base domain over subdomains. Fixes that it might otherwise pick a random sub-domain for filename on each run, cluttering the certs directory and potentially tricking Prosody into using an older certificate that might be about to expire.

mod_pubsub: Allow configuring summary templates Enables generation of summaries for more than Atom without additional modules.

mod_pubsub: Use the util.xtemplate to render Atom summary

util.xtemplate: Yet another string template library This one takes a stanza as input Roughly based on util.interpolation

mod_pubsub: Use the 'pubsub#type' setting to pick summary generator Allows using different ones even if multiple semantically different formats share the same root element xmlns, e.g. generic Atom and XEP-0277 entries.

mod_tls: Set ALPN on outgoing connections Relevant and sometimes needed for Direct TLS which mod_s2s uses this context for. Primarily when e.g. mod_net_multiplex or equivalent ALPN based dispatch is used. All these contexts should likely move away from mod_tls and into either mod_s2s or portmanager. The later already duplicates some of this work.

Added tag 0.11.13 for changeset ebeb4d959fb3

mod_admin_shell: Add command to show current user roles

mod_admin_shell: Add help section about roles As in the argument to user:create() and user:roles() Tricky to come up with something sensible to write when Prosody core only knows of the 'prosody:admin' role so far.

mod_s2s: Retrieve TLS context for outgoing Direct TLS connections from mod_tls So that the same TLS context is used for both Direct TLS and starttls, since they are supposed to be functionally identical apart from the few extra round trips. A new event is added because the 's2s-created' event fires much later, after a connection has already been established, where we need the TLS context before that.