Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[#9561] Check remote certificates for XMPP TLS #1147

Merged
merged 19 commits into from Jul 4, 2019
Merged

[#9561] Check remote certificates for XMPP TLS #1147

merged 19 commits into from Jul 4, 2019

Commits on May 7, 2019

  1. Use optionsForClientTLS to verify server certificate by default

    @ralphm
    ralphm committed May 7, 2019
    Configuration menu
    Copy the full SHA
    488bdd0 View commit details
    Browse the repository at this point in the history

  2. Fix client example to print disconnection reason

    @ralphm
    ralphm committed May 7, 2019
    Configuration menu
    Copy the full SHA
    0ff32b1 View commit details
    Browse the repository at this point in the history

  3. Allow for custom contextFactory to TLS initializer

    @ralphm
    ralphm committed May 7, 2019
    Configuration menu
    Copy the full SHA
    89954df View commit details
    Browse the repository at this point in the history

Commits on May 8, 2019

  1. Add docstrings for new contextFactory attribute

    @ralphm
    ralphm committed May 8, 2019
    Configuration menu
    Copy the full SHA
    4759e27 View commit details
    Browse the repository at this point in the history

Commits on May 9, 2019

  1. Clean up connecting authenticators 

    This adds an option `required` argument to the inits of initializers
deriving from BaseFeatureInitiatingInitializer, to simplify setup.
Additionally it changes the requiredness of two initializers used by
XMPPAuthenticator:

* Setup of TLS is now required by default. This ensures that if StartTLS
is not advertized by the server, initialization fails instead of
silently proceeding to authentication without encryption.
* Binding a resource is required by default, because without it servers
will not allow any further meaningful interaction.
    @ralphm
    ralphm committed May 9, 2019
    Configuration menu
    Copy the full SHA
    fa18e8e View commit details
    Browse the repository at this point in the history

  2. Provide a way to use custom certificate options for XMPP clients 

    This adds an optional `contextFactory` argument to `XMPPClientFactory`
that is passed on to `XMPPAuthenticator`, which in turn passes it to
`TLSInitiatingInitializer`.
    @ralphm
    ralphm committed May 9, 2019
    Configuration menu
    Copy the full SHA
    cadf08f View commit details
    Browse the repository at this point in the history

  3. Adjust tests to TLSInitiatingInitializer being required by default

    @ralphm
    ralphm committed May 9, 2019
    Configuration menu
    Copy the full SHA
    5ed194c View commit details
    Browse the repository at this point in the history

Commits on May 27, 2019

  1. Add news fragments

    @ralphm
    ralphm committed May 27, 2019
    Configuration menu
    Copy the full SHA
    a1f4390 View commit details
    Browse the repository at this point in the history

  2. Fix skipping renamed test when SSL is not available

    @ralphm
    ralphm committed May 27, 2019
    Configuration menu
    Copy the full SHA
    0a93949 View commit details
    Browse the repository at this point in the history

  3. Skip TLS tests if OpenSSL is not available

    @ralphm
    ralphm committed May 27, 2019
    Configuration menu
    Copy the full SHA
    751ac6f View commit details
    Browse the repository at this point in the history

  4. Fix indents

    @ralphm
    ralphm committed May 27, 2019
    Configuration menu
    Copy the full SHA
    672a633 View commit details
    Browse the repository at this point in the history

  5. Merge branch 'trunk' into 9561-xmpp-tls-verify-cert

    @glyph
    glyph committed May 27, 2019
    Configuration menu
    Copy the full SHA
    fa1bc1b View commit details
    Browse the repository at this point in the history

Commits on May 28, 2019

  1. Better docstring for BasicAuthenticatorTests

    @ralphm
    ralphm committed May 28, 2019
    Configuration menu
    Copy the full SHA
    a649757 View commit details
    Browse the repository at this point in the history

Commits on Jun 16, 2019

  1. Rename contextFactory to configurationForTLS, make private vars

    @ralphm
    ralphm committed Jun 16, 2019
    Configuration menu
    Copy the full SHA
    ea2d28f View commit details
    Browse the repository at this point in the history

  2. Move check for configurationTLS being None to __init__

    @ralphm
    ralphm committed Jun 16, 2019
    Configuration menu
    Copy the full SHA
    05556b6 View commit details
    Browse the repository at this point in the history

  3. Document configurationForTLS being None directly

    @ralphm
    ralphm committed Jun 16, 2019
    Configuration menu
    Copy the full SHA
    7caf8ac View commit details
    Browse the repository at this point in the history

  4. Mention CVE-2019-12855 in news fragment

    @ralphm
    ralphm committed Jun 16, 2019
    Configuration menu
    Copy the full SHA
    a66878c View commit details
    Browse the repository at this point in the history

  5. Revert "Move check for configurationTLS being None to __init__" 

    This reverts commit 05556b6.
    @ralphm
    ralphm committed Jun 16, 2019
    Configuration menu
    Copy the full SHA
    abbf0fd View commit details
    Browse the repository at this point in the history

Commits on Jul 3, 2019

  1. Merge branch 'trunk' into 9561-xmpp-tls-verify-cert

    @ralphm
    ralphm committed Jul 3, 2019
    Configuration menu
    Copy the full SHA
    d99ce02 View commit details
    Browse the repository at this point in the history