| Fri, 25 May 2018 03:33:13 +0200 |
Kim Alvefur |
Merge 0.10->trunk
|
file |
diff |
annotate
|
| Fri, 25 May 2018 03:30:16 +0200 |
Kim Alvefur |
core.certmanager: Allow all non-whitespace in service name (fixes #1019)
|
file |
diff |
annotate
|
| Wed, 28 Feb 2018 20:06:26 +0100 |
Kim Alvefur |
vairious: Add annotation when an empty environment is set [luacheck]
|
file |
diff |
annotate
|
| Thu, 28 Dec 2017 17:32:56 +0100 |
Kim Alvefur |
certmanager: Check for missing certificate before key in configuration (should be marginally less confusing)
|
file |
diff |
annotate
|
| Mon, 20 Nov 2017 00:27:26 +0100 |
Kim Alvefur |
certmanager: Set single curve conditioned on LuaSec advertising EC crypto support
|
file |
diff |
annotate
|
| Mon, 20 Nov 2017 00:26:41 +0100 |
Kim Alvefur |
certmanager: Filter out curves not supported by LuaSec
|
file |
diff |
annotate
|
| Mon, 20 Nov 2017 00:25:18 +0100 |
Kim Alvefur |
certmanager: Change table representing LuaSec capabilities to match capabilities table exposed in LuaSec 0.7
|
file |
diff |
annotate
|
| Wed, 27 Sep 2017 15:45:07 +0200 |
Kim Alvefur |
core.certmanager: Set a default curveslist [sic], fixes #879, #943, #951 if used along with luasec 0.7 and openssl 1.1
|
file |
diff |
annotate
|
| Wed, 27 Sep 2017 15:21:20 +0200 |
Kim Alvefur |
prosodyctl: cert import: Reuse function from certmanager for locating certificates and keys
|
file |
diff |
annotate
|
| Sat, 23 Sep 2017 17:13:29 +0100 |
Matthew Wild |
certmanager: Add debug logging (thanks av6)
|
file |
diff |
annotate
|
| Thu, 01 Jun 2017 14:03:50 +0200 |
Kim Alvefur |
certmanager: Update the 'certificates' option after the config has been reloaded (fixes #929)
|
file |
diff |
annotate
|
| Sat, 26 Nov 2016 20:08:48 +0100 |
Kim Alvefur |
core.certmanager: Translate "no start line" to something friendlier (thanks santiago)
|
file |
diff |
annotate
|
| Mon, 12 Sep 2016 15:49:24 +0200 |
Kim Alvefur |
core.certmanager: Split cipher list into array with comments explaining each part
|
file |
diff |
annotate
|
| Fri, 29 Jul 2016 11:24:28 +0200 |
Kim Alvefur |
certmanager: Assume default config path of '.' (fixes prosodyctl check certs when not installed)
|
file |
diff |
annotate
|
| Sat, 26 Mar 2016 19:55:08 +0000 |
Matthew Wild |
certmanager: Explicitly tonumber() version number segments before doing arithmetic and avoid relying on implicit coercion (thanks David Favro)
|
file |
diff |
annotate
|
| Thu, 18 Feb 2016 13:48:45 +0000 |
Matthew Wild |
certmanager: Localize tonumber
|
file |
diff |
annotate
|
| Fri, 05 Feb 2016 16:12:01 +0100 |
Kim Alvefur |
certmanager: Try filename.key if certificate is set to a full filename ending with .crt
|
file |
diff |
annotate
|
| Fri, 05 Feb 2016 15:03:39 +0100 |
Kim Alvefur |
certmanager: Apply global ssl config later so certificate/key is not overwritten by magic
|
file |
diff |
annotate
|
| Fri, 05 Feb 2016 00:03:41 +0000 |
Matthew Wild |
certmanager: Support new certificate configuration for non-XMPP services too (fixes #614)
|
file |
diff |
annotate
|
| Wed, 03 Feb 2016 22:44:29 +0100 |
Kim Alvefur |
core.certmanager: Look for certificate and key in a few different places
|
file |
diff |
annotate
|
| Sun, 11 Oct 2015 19:44:15 +0200 |
Kim Alvefur |
core.certmanager: Remove non-string filenames (allows setting eg capath to false to disable the built in default)
|
file |
diff |
annotate
|
| Sat, 21 Feb 2015 10:42:19 +0100 |
Kim Alvefur |
core.*: Remove use of module() function
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 17:23:53 +0100 |
Kim Alvefur |
certmanager: Fix compat for MattJs old LuaSec fork
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 17:21:05 +0100 |
Kim Alvefur |
certmanager: Fix previous commit
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 16:59:34 +0100 |
Kim Alvefur |
certmanager: Limit certificate chain depth to 9
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 16:56:28 +0100 |
Kim Alvefur |
certmanager: Options that appear to be available since LuaSec 0.2
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 16:20:50 +0100 |
Kim Alvefur |
certmanager: Improve "detection" of features that depend on LuaSec version
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 15:14:35 +0100 |
Kim Alvefur |
certmanager: Add locals for ssl.context and ssl.x509
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 15:10:23 +0100 |
Kim Alvefur |
certmanager: Early return from the entire module if LuaSec is unavailable
|
file |
diff |
annotate
|
| Tue, 20 Jan 2015 11:29:38 +0000 |
Matthew Wild |
certmanager: Make global variable access explicit
|
file |
diff |
annotate
|
| Sat, 22 Nov 2014 11:51:54 +0100 |
Kim Alvefur |
certmanager, mod_tls: Return final ssl config as third return value (fix for c6caaa440e74, portmanager assumes non-falsy second return value is an error) (thanks deoren)
|
file |
diff |
annotate
|
| Wed, 19 Nov 2014 14:47:03 +0100 |
Kim Alvefur |
certmanager: Return final ssl config along with ssl context on success
|
file |
diff |
annotate
|
| Sun, 26 Oct 2014 20:57:06 +0100 |
Kim Alvefur |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Tue, 14 Oct 2014 18:55:08 +0100 |
Matthew Wild |
certmanager, net.http: Disable SSLv3 by default
0.9.6
|
file |
diff |
annotate
|
| Thu, 03 Jul 2014 15:32:26 +0200 |
Kim Alvefur |
core.certmanager: Make create_context() support an arbitrary number of option sets, merging all
|
file |
diff |
annotate
|
| Thu, 03 Jul 2014 15:31:12 +0200 |
Kim Alvefur |
core.certmanager: Use util.sslconfig
|
file |
diff |
annotate
|
| Fri, 09 May 2014 19:35:29 +0200 |
Kim Alvefur |
core.certmanager, core.moduleapi, mod_storage_sql, mod_storage_sql2: Import from util.paths
|
file |
diff |
annotate
|
| Mon, 21 Apr 2014 02:43:09 +0200 |
Kim Alvefur |
certmanager: Move ssl.protocol handling to after ssl.options is a table (thanks Ralph)
|
file |
diff |
annotate
|
| Sun, 20 Apr 2014 21:25:26 +0200 |
Kim Alvefur |
certmanager: Fix traceback if no global 'ssl' section set (thanks albert)
|
file |
diff |
annotate
|
| Tue, 15 Apr 2014 01:02:56 +0200 |
Kim Alvefur |
certmanager: Update ssl_compression when config is reloaded
|
file |
diff |
annotate
|
| Tue, 15 Apr 2014 00:49:17 +0200 |
Kim Alvefur |
certmanager: Reformat core ssl defaults
|
file |
diff |
annotate
|
| Tue, 15 Apr 2014 00:45:07 +0200 |
Kim Alvefur |
certmanager: Support ssl.protocol syntax like "tlsv1+" that disables older protocols
|
file |
diff |
annotate
|
| Tue, 15 Apr 2014 00:32:11 +0200 |
Kim Alvefur |
certmanager: Merge ssl.options, verify etc from core defaults and global ssl settings with inheritance while allowing options to be disabled per virtualhost
|
file |
diff |
annotate
|
| Mon, 14 Apr 2014 23:41:26 +0200 |
Kim Alvefur |
certmanager: Wrap long line and add comment
|
file |
diff |
annotate
|
| Mon, 14 Apr 2014 23:34:35 +0200 |
Kim Alvefur |
certmanager: Concatenate cipher list if given as a table
|
file |
diff |
annotate
|
| Mon, 14 Apr 2014 23:09:28 +0200 |
Kim Alvefur |
certmanager: Allow non-server contexts to be without certificate and key
|
file |
diff |
annotate
|
| Mon, 14 Apr 2014 23:00:44 +0200 |
Kim Alvefur |
certmanager: Check for non-nil values instead of true-ish values, allows removing defaults
|
file |
diff |
annotate
|
| Thu, 21 Nov 2013 02:14:23 +0000 |
Matthew Wild |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Thu, 21 Nov 2013 02:11:09 +0000 |
Matthew Wild |
certmanager: Further cipher string tweaking. Re-enable ciphers required for DSA and ECDH certs/keys.
|
file |
diff |
annotate
|
| Tue, 12 Nov 2013 02:23:02 +0000 |
Matthew Wild |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Tue, 12 Nov 2013 02:13:01 +0000 |
Matthew Wild |
Back out 1b0ac7950129, as SSLv3 appears to still be in moderate use on the network. Also, although obsolete, SSLv3 isn't documented to have any weaknesses that TLS 1.0 (the most common version used today) doesn't also have. Get your act together clients!
|
file |
diff |
annotate
|
| Sun, 10 Nov 2013 18:49:34 +0000 |
Matthew Wild |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Sun, 10 Nov 2013 18:46:48 +0000 |
Matthew Wild |
certmanager: Update default cipher string to prefer forward-secrecy over cipher strength and to disable triple-DES (weaker and much slower than AES)
|
file |
diff |
annotate
|
| Sat, 09 Nov 2013 18:36:32 +0000 |
Matthew Wild |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Sat, 09 Nov 2013 17:54:21 +0000 |
Matthew Wild |
certmanager: Fix order of options, so that the dynamic option is at the end of the array
|
file |
diff |
annotate
|
| Sat, 09 Nov 2013 17:50:19 +0000 |
Matthew Wild |
certmanager: Default to using the server's cipher preference order by default, as clients have been shown to commonly select weak and insecure ciphers even when they support stronger ones
|
file |
diff |
annotate
|
| Thu, 31 Oct 2013 20:47:57 +0100 |
Kim Alvefur |
Merge 0.9 -> 0.10
|
file |
diff |
annotate
|
| Thu, 31 Oct 2013 19:00:36 +0100 |
Kim Alvefur |
certmanager: Disable SSLv3 by default
|
file |
diff |
annotate
|
| Tue, 15 Oct 2013 10:47:34 +0200 |
Kim Alvefur |
certmanager: Fix. Again.
|
file |
diff |
annotate
|
| Tue, 15 Oct 2013 01:37:16 +0200 |
Kim Alvefur |
certmanager: Add back single_dh_use and single_ecdh_use to default options (Zash breaks, Zash unbreaks)
|
file |
diff |
annotate
|