1924afe49e
Add explicit support for TLS v1.3 and drop TLS v1.0.
7 years ago
130ddf47f7
Add `dhparamfile` option, to allow DH parameters to be loaded.
...
This is for Ephemeral DH support on listeners.
7 years ago
1a3eaeabce
Only use getrandom on recent glibc, when TLS not in use.
7 years ago
4564ff1232
Set umask for temp file.
7 years ago
38711fc3f3
Fix merge error for C90 compile fail.
7 years ago
87b3ca35f1
Use mkstemp with mosquitto_passwd on non-Windows.
7 years ago
deb2fdfc98
Use lib provided random id. Change lib generated id to alphanumeric only.
7 years ago
48d731ecb5
Use better random numbers for everything, where possible.
7 years ago
dfbd33e0f4
Update documentation for bridge backup, plus tweaks
...
Sets default to use the backoff mechanism.
7 years ago
1773938d98
bridge: modify documentation for restart_timeout
...
Signed-off-by: Abilio Marques <abiliojr@gmail.com>
7 years ago
40ec968529
bridge: modify configuration file description for restart_timeout
...
Signed-off-by: Abilio Marques <abiliojr@gmail.com>
7 years ago
87eb535307
bridge: add decorrelated jitter backoff mechanism
...
Signed-off-by: Abilio Marques <abiliojr@gmail.com>
7 years ago
72941db546
Coverity fixes
...
1399064
1399065
1398655
1398656
1398654
1399067
1399066
1399063
1399060
1399059
1399068
1399062
1398657
1398653
1302848
1302847
1399070
7 years ago
e334aad853
Rewrite bind_interface docs, update changelog.
7 years ago
208c3d3e85
Allow binding a listener to a specific network interface
...
Signed-off-by: Steven Lawrance <stl@koffein.net>
7 years ago
b2c0c3d573
Handle DISCONNECT with will.
7 years ago
3b6b6d5fa8
Test improvements
...
And some related fixes.
7 years ago
c506c8335b
Will delay tests and implementation.
7 years ago
b0c60fb6e1
Separate will reading code.
7 years ago
5aabc171b0
Merge branch 'mqtt5' into develop
7 years ago
e862a047a8
Rework TLS engine support.
7 years ago
20894fcbce
Add engine private key password support
...
Some OpenSSL engines (selectable via tls_engine option) may require a
password to make use of private keys created with them in the first place.
The TPM engine for example, will require a password to access the underlying
TPM's Storage Root Key (SRK), which is the root key of a hierarchy of keys
associated with a TPM; it is generated within a TPM and is a non-migratable
key. Each owned TPM contains a SRK, generated by the TPM at the request
of the Owner. [1]
By default, the engine will prompt the user to introduce the SRK password
before any private keys created with the engine can be used. This could
be inconvenient when running on an unattended system.
Here's where the new tls_engine_kpass_sha option comes in handy. The user
can specify a SHA1 hash of its engine private key password via command
line or config file and it will be passed on to the engine directly.
This commit adds support for both clients (libmosquitto) and broker.
[1] https://goo.gl/qQoXBY
Signed-off-by: Nicolás Pernas Maradei <nicopernas@gmail.com>
7 years ago
d5f039ec7c
Add TLS engine and keyform support to mosquitto
...
Add same OpenSSL engine support to mosquitto (server side) previously added to
client side only.
Signed-off-by: Nicolás Pernas Maradei <nicopernas@gmail.com>
7 years ago
f88cc06435
Add TLS engine and keyform support to libmosquitto
...
- Clients can now offload crypto tasks to an external crypto device through
the OpenSSL ENGINE API.
- The keyfiles can now be treated as PEM or ENGINE keys.
- Two new functions were added to libmosquitto to set up the previously
mentioned features.
- Both mosquitto_sub and mosquitto_pub include support to turn on the mentioned
features through command line options.
Signed-off-by: Nicolás Pernas Maradei <nicopernas@gmail.com>
7 years ago
c3c8c99f5d
Fix dropping oversize messages for QoS>0.
7 years ago
1d17ced449
Broker configurable max_packet_size
...
Plus tests.
7 years ago
8fb4ad48b5
Strings for new error codes.
7 years ago
b9b8e0ff2a
Add client support for outgoing maximum packet size.
7 years ago
1877f8a326
Tests and implementation for maximum packet size.
...
This is for broker outgoing connack and publish packets only.
7 years ago
8db16591fa
Test and fix for subscription identifiers not being updated.
...
Closes #1169 . Thanks to Christoph Krey.
7 years ago
66c1e2ccf0
Add mosquitto_unsubscribe_multiple(), plus tests.
7 years ago
c823073be6
v5 unsubscribe test, single topic.
7 years ago
1479c57e34
v5 report reason code=no sub when unsubscribing.
7 years ago
1ec0cea34a
Fix missing reason_code on v5 UNSUBACK.
...
Closes #1167 . Thanks to Christoph Krey.
7 years ago
458a9840ad
Bump version for test release.
7 years ago
baa4642bd3
Generic ptest implementation.
7 years ago
b4a94f5900
Fix some ssl tests.
7 years ago
950ad8d16f
Speed up pattern matching test.
7 years ago
016ce7dca5
Simplify ptest implementation.
7 years ago
e2f269bda8
Test duration printing on ptest.
7 years ago
084062c85e
Merge branch 'fixes' into mqtt5
7 years ago
b6dc4e5780
Fix datatype_read test.
7 years ago
bb914b985c
Fix `mosquitto_topic_matches_sub()` rc with sub=="topic/#abc".
...
This now returns MOSQ_ERR_INVAL as expected.
7 years ago
b6fb2c5824
Fix property write test after function changes.
7 years ago
e72d1d6ff5
Fix `mosquitto_topic_matches_sub()` rc with sub=="topic/#abc".
...
This now returns MOSQ_ERR_INVAL as expected.
7 years ago
04e89450c0
Don't require C99 compiler.
7 years ago
715da28602
Fix include_dir not sorting config files before loading.
...
Thanks to momoskitto.
7 years ago
2e1c2c430f
`per_listener_settings true` must come before other security settings.
...
Produce error if this is not the case. Closes #1164 , thanks to
momoskitto.
7 years ago
9378016b19
Fix build failure when using WITH_ADNS=yes
7 years ago
ff36baa49e
Bump Docker version.
7 years ago
Roger A. Light
Abilio Marques
Steven Lawrance
Nicolás Pernas Maradei