Kim Alvefur <zash@zash.se> [Mon, 13 Apr 2020 16:14:39 +0200] rev 10726
Merge 0.11->trunk
Kim Alvefur <zash@zash.se> [Sun, 25 Aug 2019 20:22:35 +0200] rev 10725
core.certmanager: Move EECDH ciphers before EDH in default cipherstring (fixes #1513)
Backport of 94e341dee51c
The original intent of having kEDH before kEECDH was that if a `dhparam`
file was specified, this would be interpreted as a preference by the
admin for old and well-tested Diffie-Hellman key agreement over newer
elliptic curve ones. Otherwise the faster elliptic curve ciphersuites
would be preferred. This didn't really work as intended since this
affects the ClientHello on outgoing s2s connections, leading to some
servers using poorly configured kEDH.
With Debian shipping OpenSSL settings that enforce a higher security
level, this caused interoperability problems with servers that use DH
params smaller than 2048 bits. E.g. jabber.org at the time of this
writing has 1024 bit DH params.
MattJ says
> Curves have won, and OpenSSL is less weird about them now
Kim Alvefur <zash@zash.se> [Sun, 26 Jan 2020 16:40:21 +0100] rev 10724
util.prosodyctl: Tell prosody do daemonize via command line flag (fixes #1514)
Backport of 88be11e9f9b9
Kim Alvefur <zash@zash.se> [Sun, 12 Apr 2020 22:57:14 +0200] rev 10723
net.http.server: Use error code from util.error (fixes #1502)
Oversight in 955e54e451dc when this was added.
Kim Alvefur <zash@zash.se> [Sun, 12 Apr 2020 17:30:16 +0200] rev 10722
mod_scansion_record: Indent stanzas in recordings
Improves readability, easier to see structure.
Kim Alvefur <zash@zash.se> [Sun, 12 Apr 2020 17:03:05 +0200] rev 10721
util.stanza: Add method returning stanza with added indentation
Adds indentation and line breaks to stanzas, to make stanzas easier to
read for humans.
Kim Alvefur <zash@zash.se> [Sat, 11 Apr 2020 19:31:15 +0200] rev 10720
mod_component: Specify an error source for Component unavailable errors
It is somewhat ambiguous where an error really comes from in the case of
an external component.
Setting by to the bare host at least distinguishes it from JIDs with a
node- or resourcepart.
Kim Alvefur <zash@zash.se> [Sat, 11 Apr 2020 17:59:39 +0200] rev 10719
spec: Include a hacky moduleapi stub to allow test to proceed
Matthew Wild <mwild1@gmail.com> [Sat, 11 Apr 2020 16:45:27 +0100] rev 10718
MUC: Switch hats to new presence APIs
Matthew Wild <mwild1@gmail.com> [Sat, 11 Apr 2020 16:43:57 +0100] rev 10717
MUC: Add API for adding 'filtered namespaces' to be stripped from inbound presence