| Sat, 23 Sep 2017 17:13:29 +0100 |
Matthew Wild |
certmanager: Add debug logging (thanks av6)
|
file |
diff |
annotate
|
| Thu, 01 Jun 2017 14:03:50 +0200 |
Kim Alvefur |
certmanager: Update the 'certificates' option after the config has been reloaded (fixes #929)
|
file |
diff |
annotate
|
| Sat, 26 Nov 2016 20:08:48 +0100 |
Kim Alvefur |
core.certmanager: Translate "no start line" to something friendlier (thanks santiago)
|
file |
diff |
annotate
|
| Mon, 12 Sep 2016 15:49:24 +0200 |
Kim Alvefur |
core.certmanager: Split cipher list into array with comments explaining each part
|
file |
diff |
annotate
|
| Fri, 29 Jul 2016 11:24:28 +0200 |
Kim Alvefur |
certmanager: Assume default config path of '.' (fixes prosodyctl check certs when not installed)
|
file |
diff |
annotate
|
| Sat, 26 Mar 2016 19:55:08 +0000 |
Matthew Wild |
certmanager: Explicitly tonumber() version number segments before doing arithmetic and avoid relying on implicit coercion (thanks David Favro)
|
file |
diff |
annotate
|
| Thu, 18 Feb 2016 13:48:45 +0000 |
Matthew Wild |
certmanager: Localize tonumber
|
file |
diff |
annotate
|
| Fri, 05 Feb 2016 16:12:01 +0100 |
Kim Alvefur |
certmanager: Try filename.key if certificate is set to a full filename ending with .crt
|
file |
diff |
annotate
|
| Fri, 05 Feb 2016 15:03:39 +0100 |
Kim Alvefur |
certmanager: Apply global ssl config later so certificate/key is not overwritten by magic
|
file |
diff |
annotate
|
| Fri, 05 Feb 2016 00:03:41 +0000 |
Matthew Wild |
certmanager: Support new certificate configuration for non-XMPP services too (fixes #614)
|
file |
diff |
annotate
|
| Wed, 03 Feb 2016 22:44:29 +0100 |
Kim Alvefur |
core.certmanager: Look for certificate and key in a few different places
|
file |
diff |
annotate
|
| Sun, 11 Oct 2015 19:44:15 +0200 |
Kim Alvefur |
core.certmanager: Remove non-string filenames (allows setting eg capath to false to disable the built in default)
|
file |
diff |
annotate
|
| Sat, 21 Feb 2015 10:42:19 +0100 |
Kim Alvefur |
core.*: Remove use of module() function
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 17:23:53 +0100 |
Kim Alvefur |
certmanager: Fix compat for MattJs old LuaSec fork
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 17:21:05 +0100 |
Kim Alvefur |
certmanager: Fix previous commit
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 16:59:34 +0100 |
Kim Alvefur |
certmanager: Limit certificate chain depth to 9
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 16:56:28 +0100 |
Kim Alvefur |
certmanager: Options that appear to be available since LuaSec 0.2
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 16:20:50 +0100 |
Kim Alvefur |
certmanager: Improve "detection" of features that depend on LuaSec version
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 15:14:35 +0100 |
Kim Alvefur |
certmanager: Add locals for ssl.context and ssl.x509
|
file |
diff |
annotate
|
| Thu, 05 Feb 2015 15:10:23 +0100 |
Kim Alvefur |
certmanager: Early return from the entire module if LuaSec is unavailable
|
file |
diff |
annotate
|
| Tue, 20 Jan 2015 11:29:38 +0000 |
Matthew Wild |
certmanager: Make global variable access explicit
|
file |
diff |
annotate
|
| Sat, 22 Nov 2014 11:51:54 +0100 |
Kim Alvefur |
certmanager, mod_tls: Return final ssl config as third return value (fix for c6caaa440e74, portmanager assumes non-falsy second return value is an error) (thanks deoren)
|
file |
diff |
annotate
|
| Wed, 19 Nov 2014 14:47:03 +0100 |
Kim Alvefur |
certmanager: Return final ssl config along with ssl context on success
|
file |
diff |
annotate
|
| Sun, 26 Oct 2014 20:57:06 +0100 |
Kim Alvefur |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Tue, 14 Oct 2014 18:55:08 +0100 |
Matthew Wild |
certmanager, net.http: Disable SSLv3 by default
0.9.6
|
file |
diff |
annotate
|
| Thu, 03 Jul 2014 15:32:26 +0200 |
Kim Alvefur |
core.certmanager: Make create_context() support an arbitrary number of option sets, merging all
|
file |
diff |
annotate
|
| Thu, 03 Jul 2014 15:31:12 +0200 |
Kim Alvefur |
core.certmanager: Use util.sslconfig
|
file |
diff |
annotate
|
| Fri, 09 May 2014 19:35:29 +0200 |
Kim Alvefur |
core.certmanager, core.moduleapi, mod_storage_sql, mod_storage_sql2: Import from util.paths
|
file |
diff |
annotate
|
| Mon, 21 Apr 2014 02:43:09 +0200 |
Kim Alvefur |
certmanager: Move ssl.protocol handling to after ssl.options is a table (thanks Ralph)
|
file |
diff |
annotate
|
| Sun, 20 Apr 2014 21:25:26 +0200 |
Kim Alvefur |
certmanager: Fix traceback if no global 'ssl' section set (thanks albert)
|
file |
diff |
annotate
|
| Tue, 15 Apr 2014 01:02:56 +0200 |
Kim Alvefur |
certmanager: Update ssl_compression when config is reloaded
|
file |
diff |
annotate
|
| Tue, 15 Apr 2014 00:49:17 +0200 |
Kim Alvefur |
certmanager: Reformat core ssl defaults
|
file |
diff |
annotate
|
| Tue, 15 Apr 2014 00:45:07 +0200 |
Kim Alvefur |
certmanager: Support ssl.protocol syntax like "tlsv1+" that disables older protocols
|
file |
diff |
annotate
|
| Tue, 15 Apr 2014 00:32:11 +0200 |
Kim Alvefur |
certmanager: Merge ssl.options, verify etc from core defaults and global ssl settings with inheritance while allowing options to be disabled per virtualhost
|
file |
diff |
annotate
|
| Mon, 14 Apr 2014 23:41:26 +0200 |
Kim Alvefur |
certmanager: Wrap long line and add comment
|
file |
diff |
annotate
|
| Mon, 14 Apr 2014 23:34:35 +0200 |
Kim Alvefur |
certmanager: Concatenate cipher list if given as a table
|
file |
diff |
annotate
|
| Mon, 14 Apr 2014 23:09:28 +0200 |
Kim Alvefur |
certmanager: Allow non-server contexts to be without certificate and key
|
file |
diff |
annotate
|
| Mon, 14 Apr 2014 23:00:44 +0200 |
Kim Alvefur |
certmanager: Check for non-nil values instead of true-ish values, allows removing defaults
|
file |
diff |
annotate
|
| Thu, 21 Nov 2013 02:14:23 +0000 |
Matthew Wild |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Thu, 21 Nov 2013 02:11:09 +0000 |
Matthew Wild |
certmanager: Further cipher string tweaking. Re-enable ciphers required for DSA and ECDH certs/keys.
|
file |
diff |
annotate
|
| Tue, 12 Nov 2013 02:23:02 +0000 |
Matthew Wild |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Tue, 12 Nov 2013 02:13:01 +0000 |
Matthew Wild |
Back out 1b0ac7950129, as SSLv3 appears to still be in moderate use on the network. Also, although obsolete, SSLv3 isn't documented to have any weaknesses that TLS 1.0 (the most common version used today) doesn't also have. Get your act together clients!
|
file |
diff |
annotate
|
| Sun, 10 Nov 2013 18:49:34 +0000 |
Matthew Wild |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Sun, 10 Nov 2013 18:46:48 +0000 |
Matthew Wild |
certmanager: Update default cipher string to prefer forward-secrecy over cipher strength and to disable triple-DES (weaker and much slower than AES)
|
file |
diff |
annotate
|
| Sat, 09 Nov 2013 18:36:32 +0000 |
Matthew Wild |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Sat, 09 Nov 2013 17:54:21 +0000 |
Matthew Wild |
certmanager: Fix order of options, so that the dynamic option is at the end of the array
|
file |
diff |
annotate
|
| Sat, 09 Nov 2013 17:50:19 +0000 |
Matthew Wild |
certmanager: Default to using the server's cipher preference order by default, as clients have been shown to commonly select weak and insecure ciphers even when they support stronger ones
|
file |
diff |
annotate
|
| Thu, 31 Oct 2013 20:47:57 +0100 |
Kim Alvefur |
Merge 0.9 -> 0.10
|
file |
diff |
annotate
|
| Thu, 31 Oct 2013 19:00:36 +0100 |
Kim Alvefur |
certmanager: Disable SSLv3 by default
|
file |
diff |
annotate
|
| Tue, 15 Oct 2013 10:47:34 +0200 |
Kim Alvefur |
certmanager: Fix. Again.
|
file |
diff |
annotate
|
| Tue, 15 Oct 2013 01:37:16 +0200 |
Kim Alvefur |
certmanager: Add back single_dh_use and single_ecdh_use to default options (Zash breaks, Zash unbreaks)
|
file |
diff |
annotate
|
| Tue, 03 Sep 2013 15:43:59 +0200 |
Kim Alvefur |
certmanager: Allow for specifying the dhparam option as a path to a file instead of a callback
|
file |
diff |
annotate
|
| Tue, 03 Sep 2013 13:43:39 +0200 |
Kim Alvefur |
Merge 0.9->trunk
|
file |
diff |
annotate
|
| Tue, 03 Sep 2013 13:40:29 +0200 |
Kim Alvefur |
certmanager: Fix dhparam callback, missing imports (Testing, pfft)
0.9.1
|
file |
diff |
annotate
|
| Tue, 03 Sep 2013 12:32:18 +0100 |
Matthew Wild |
Merge 0.9->trunk
|
file |
diff |
annotate
|
| Tue, 03 Sep 2013 13:13:31 +0200 |
Kim Alvefur |
certmanager: Allow for specifying the dhparam option as a path to a file instead of a callback
|
file |
diff |
annotate
|
| Tue, 03 Sep 2013 12:11:11 +0100 |
Matthew Wild |
certmanager: Fix for working around a bug with LuaSec 0.4.1 that causes it to not honour the 'ciphers' option. This change will apply 0.9's default cipher string for LuaSec 0.4.1 users.
|
file |
diff |
annotate
|
| Fri, 09 Aug 2013 17:48:21 +0200 |
Florian Zeitz |
Remove all trailing whitespace
|
file |
diff |
annotate
|
| Sat, 13 Jul 2013 13:17:53 +0100 |
Matthew Wild |
Merge 0.9->trunk
|
file |
diff |
annotate
|
| Sat, 13 Jul 2013 13:15:24 +0100 |
Matthew Wild |
certmanager: Set our own default cipher string, which includes only ciphers regarded as 'HIGH' strength (by OpenSSL). In particular this disables RC4.
|
file |
diff |
annotate
|