http://hg.omfa.de/prosody-hg/ en-us prosody-hg: plugins/mod_s2s_auth_certs.lua history plugins/mod_s2s_auth_certs.lua revision history mod_s2s_auth_certs: Handle potential string error http://hg.omfa.de/prosody-hg/log/3c219effe707/plugins/mod_s2s_auth_certs.lua
conn:ssl_peerverification() can now return a single error in case the
connection has been closed for whatever reason]]> Kim Alvefur <zash@zash.se> Wed, 21 Feb 2024 21:29:16 +0100 mod_s2s_auth_certs: Remove LuaSec compat that moved to net.server http://hg.omfa.de/prosody-hg/log/874600c982bd/plugins/mod_s2s_auth_certs.lua Kim Alvefur <zash@zash.se> Sat, 04 Nov 2023 17:12:01 +0100 plugins: Prefix module imports with prosody namespace http://hg.omfa.de/prosody-hg/log/74b9e05af71e/plugins/mod_s2s_auth_certs.lua Kim Alvefur <zash@zash.se> Fri, 24 Mar 2023 13:15:28 +0100 mod_s2s_auth_certs: Validate certificates against secure SRV targets http://hg.omfa.de/prosody-hg/log/02f8b10d73e8/plugins/mod_s2s_auth_certs.lua
Secure delegation or "Mini-DANE"

As with the existing DANE support, only usable in one direction, client
certificate authentication will fail if this is relied on.]]> Kim Alvefur <zash@zash.se> Thu, 22 Dec 2022 00:13:37 +0100 Revert unintentionally committed parts of 12bd40b8e105 http://hg.omfa.de/prosody-hg/log/b2d422b88cd6/plugins/mod_s2s_auth_certs.lua Kim Alvefur <zash@zash.se> Wed, 21 Dec 2022 21:34:07 +0100 mod_c2s,mod_s2s: Adapt to XEP-xxxx: Stream Limits Advertisement http://hg.omfa.de/prosody-hg/log/12bd40b8e105/plugins/mod_s2s_auth_certs.lua
Thanks MattJ]]> Kim Alvefur <zash@zash.se> Thu, 20 Oct 2022 14:04:56 +0200 net: isolate LuaSec-specifics http://hg.omfa.de/prosody-hg/log/7e9ebdc75ce4/plugins/mod_s2s_auth_certs.lua
For this, various accessor functions are now provided directly on the
sockets, which reach down into the LuaSec implementation to obtain the
information.

While this may seem of little gain at first, it hides the implementation
detail of the LuaSec+LuaSocket combination that the actual socket and
the TLS layer are separate objects.

The net gain here is that an alternative implementation does not have to
emulate that specific implementation detail and "only" has to expose
LuaSec-compatible data structures on the new functions.]]> Jonas Schäfer <jonas@wielicki.name> Wed, 27 Apr 2022 17:44:14 +0200 mod_s2s_auth_certs: Collect stats on validation results (for #975) http://hg.omfa.de/prosody-hg/log/a405884c62f4/plugins/mod_s2s_auth_certs.lua Kim Alvefur <zash@zash.se> Tue, 05 Oct 2021 16:30:41 +0200 mod_s2s_auth_certs: Save chain validation errors for later use http://hg.omfa.de/prosody-hg/log/6c3fccb75b38/plugins/mod_s2s_auth_certs.lua Kim Alvefur <zash@zash.se> Wed, 27 Nov 2019 23:23:25 +0100 Remove COMPAT with temporary luasec fork http://hg.omfa.de/prosody-hg/log/77f900bbbf25/plugins/mod_s2s_auth_certs.lua
The changes in the temporary fork were merged into mainline luasec ca
2013 and included in the 0.5 release in 2014.]]> Kim Alvefur <zash@zash.se> Sun, 25 Aug 2019 23:12:55 +0200 mod_s2s_auth_certs: Warn about lack of certificate (Mostly jabberd14 not sending a client certificate) http://hg.omfa.de/prosody-hg/log/84e7e418c29a/plugins/mod_s2s_auth_certs.lua Kim Alvefur <zash@zash.se> Fri, 29 Aug 2014 02:24:49 +0200 mod_s2s_auth_certs: Pick a logging function once and stick with it http://hg.omfa.de/prosody-hg/log/17344d25a0f6/plugins/mod_s2s_auth_certs.lua Kim Alvefur <zash@zash.se> Fri, 25 Jul 2014 21:03:16 +0200 mod_s2s_auth_certs: Split PKIX based certificate checking from mod_s2s into new plugin http://hg.omfa.de/prosody-hg/log/92d009af6eba/plugins/mod_s2s_auth_certs.lua Kim Alvefur <zash@zash.se> Fri, 25 Jul 2014 20:41:54 +0200