Kim Alvefur <zash@zash.se> [Mon, 21 Jun 2021 22:38:30 +0200] rev 11630
mod_external_services: Also validate services added by other modules
This ensures that problems with entries added other modules, e.g.
mod_turn_external, are reported on startup. However, this depends on
load order and whether a `module:depends()` call comes before the
`module:add_item()` call. A followup commit will do something about
that.
Kim Alvefur <zash@zash.se> [Mon, 21 Jun 2021 17:31:17 +0200] rev 11629
mod_storage_sql: Fix for move of yes/no function (Thanks Kasim)
Kim Alvefur <zash@zash.se> [Mon, 21 Jun 2021 13:45:44 +0200] rev 11628
mod_s2s: Remove duplicate method call (thanks luacheck)
Should have been removed in the previous commit.
Kim Alvefur <zash@zash.se> [Mon, 21 Jun 2021 13:43:40 +0200] rev 11627
mod_s2s: Guard against LuaSec not returning TLS info here too
See previous commit to mod_c2s: a62146353528
Kim Alvefur <zash@zash.se> [Mon, 21 Jun 2021 13:36:05 +0200] rev 11626
mod_c2s: Guard against LuaSec not returning TLS info (thanks Martin)
The :info() method has been observed to return nothing ... sometimes.
Unclear what causes it. Perhaps the TLS connection was shut down or
hasn't fully settled?
The LuaSec code has code paths that return nothing or nil, error, so it
is best to guard against it.
Kim Alvefur <zash@zash.se> [Sun, 20 Jun 2021 18:46:52 +0200] rev 11625
doap: Update XEP-0368 entry with mention of direct_tls_ports
Kim Alvefur <zash@zash.se> [Sun, 20 Jun 2021 18:17:22 +0200] rev 11624
CHANGES: Add Direct TLS support
Since there is now support for SNI with per-host certificates as well as
support in `prosodyctl check dns`.
Previous "support" was just the 'legacy_ssl' option, which didn't have
much other supporting code.
Kim Alvefur <zash@zash.se> [Sun, 20 Jun 2021 18:15:59 +0200] rev 11623
mod_c2s: Log the same messages for Direct TLS as with starttls
^C^V
Kim Alvefur <zash@zash.se> [Sun, 20 Jun 2021 18:14:18 +0200] rev 11622
mod_c2s: Update a comment to reflect Direct TLS
Kim Alvefur <zash@zash.se> [Sun, 20 Jun 2021 17:51:44 +0200] rev 11621
util.prosodyctl.check: Ensure that libunbound does not check hosts file
This fixes wrongly reported DNS problems on some distros where the hosts
file contains an entry for the local machine, pointing at a loopback
address such as 127.0.1.1 or similar.