36eb5ca0c9
Bump changelog date.
5 years ago
37ce51703f
Fix websockets listeners not causing the main loop not to wake up.
...
Closes #1936 . Thanks to sectokia.
5 years ago
66b680af34
Bump version number.
5 years ago
d8dcfd75fe
lib: Fix DH group not being set for TLS connections.
...
This meant ciphers using DHE couldn't be used.
Closes #1925 . Closes #1476 . Thanks to Jonathan Sönnerup, Valerii
Demeshko, and sectokia.
5 years ago
b7f0161f52
Fix DH group not being set for TLS connections.
...
This meant ciphers using DHE couldn't be used.
Closes #1925 . Closes #1476 . Thanks to Jonathan Sönnerup, Valerii
Demeshko, and sectokia.
5 years ago
bdfa5e714a
Fix `mosquitto_passwd -U`
5 years ago
9968e35981
Fix websockets connections on Windows blocking subsequent connections.
...
Closes #1934 . Thanks to sectokia.
5 years ago
0d747673d3
Distribute cmake/ and snap/ directories in tar.
5 years ago
c25229c13a
Fix build using WITH_TLS=no when the openssl headers aren't available.
5 years ago
791c63372b
Fix cjson include paths.
5 years ago
74db0e977f
Merge branch 'develop'
5 years ago
6904fac6a4
Bump version number and changelog.
5 years ago
232a759320
Log client port on new connections.
...
Closes #1911 . Thanks to twegener-embertec.
5 years ago
04c110183c
Bridge support for MQTT v5 maximum-qos.
5 years ago
ca4b23486b
Bridges now obey MQTT v5 server-keepalive.
5 years ago
0c22f475ff
Fix bridges incorrectly setting Wills to manage remote notifications.
...
This is for when `notifications_local_only` was set true.
Closes #1902 . Thanks to marcinkowskip.
5 years ago
b34dcd2a67
Final remove support for legacy libwebsockets
...
This means libwebsockets < 2.4.0.
5 years ago
c39a42adcc
Report an error if the config file is set to a directory.
...
Closes #1814 . Thanks to Odysseus1710.
5 years ago
29c771cdd4
Add lib and client support for OS CA certs
...
- Add `MOSQ_OPT_TLS_USE_OS_CERTS` option, to instruct the client to load and trust OS provided CA certificates for use with TLS connections.
- All clients now load OS provided CA certificates if used with `-L
mqtts://...`, or if port is set to 8883 and no other CA certificates are
used. Closes #1824 .
- Add the `--tls-use-os-certs` option to all clients.
Closes #1824 . Thanks to Jens Reimann.
5 years ago
b7e6638fd8
Add `ciphers_tls1.3` option, to allow setting TLS v1.3 ciphersuites.
...
Closes #1825 . Thanks to Valentin Dimov.
5 years ago
b169dc0b1e
mosquitto_sub will quit with an error on Windows if %U is used.
...
Seconds since the Unix epoch is not a parameter that can be obtained
with strftime on Windows.
Closes #1908 . Thanks to Danil intl.
5 years ago
dac841a342
Better outgoing QoS 0 limiting.
5 years ago
4667c9d5bc
Change max_queued_messages default to 1000.
5 years ago
10ecae6275
Fix bridge sock not being removed from sock hash on error
...
Prior to this, duplicate entries could be added to the sock hash, which caused an infinite loop. Only affects bridges with bad settings on startup, and only when compiled using WITH_ADNS=yes.
Closes #1897 . Thanks to Rodolfo Ochoa.
5 years ago
f02c67fecf
Fix file logging on Windows.
...
Closes #1880 . Thanks to J1EXA, richl, and EnneiteZer.
5 years ago
e7a4e73cd8
Fix listener not being reassociated with client.
...
This occurred when reloading a persistence file and
`per_listener_settings true` is set and the client did not set a
username.
Closes #1891 . Thanks to Mikkel Nepper-Christensen.
5 years ago
a0c39b193b
Fix description of `-e` and `-t` arguments in mosquitto_rr.
...
Closes #1881 . Thanks to Arnav Singh.
5 years ago
2a1df4ddb2
Breaking: Drop privileges after loading the configuration
...
This change means privileges are dropped before loading certificates, starting logging, creating the pid file etc. are carried out, so all of those actions must now be changed to ensure that the unprivileged user can carry them out.
5 years ago
e6dd08074d
TLS certificates for the server are now reloaded on SIGHUP.
5 years ago
e01d391c0b
Fix crash on Windows if loading a plugin fails.
...
Closes #1866 . Thanks to roebotron.
5 years ago
abbeb4494f
Change `tls_version` option behaviour.
...
The `tls_version` option now defines the *minimum* TLS protocol version to
be used, rather than the exact version.
Closes #1258 . Thanks to Daniele Sluijters.
5 years ago
edee5aaf8d
Add the `bridge_bind_address` option.
...
Closes #1311 . Thanks to beville.
5 years ago
d8f5aacd7f
Add the `bridge_max_packet_size` option.
...
Closes #265 .
5 years ago
916c3744f3
Fix `log_timestamp_format` not applying to `log_dest topic`.
...
Closes #1862 . Thanks to Kaushik-27.
5 years ago
e82ee879d5
Merge branch 'fixes' into develop
5 years ago
751fda44bd
Remove conflict marker.
5 years ago
4ae8971ce1
The broker now sends the receive-maximum property for MQTT v5 CONNACKs.
5 years ago
3506fe4099
Update docs for acl deny feature.
5 years ago
6104172bcf
Fix connect properties not being sent.
...
This was happening when the client automatically reconnected.
Closes #1846 . Thanks to DSOFreak.
5 years ago
9724710cd6
Add MOSQ_OPT_BIND_ADDRESS.
...
This allows setting of a bind address independently of the
`mosquitto_connect*()` call.
5 years ago
94c4108977
The `pid_file` option will now always attempt to write a pid file.
...
This happens regardless of whether the `-d` argument is used when
running the broker.
Closes #1845 . Thanks to habazut.
5 years ago
be8b94189c
Document that X509_free() must be called after using mosquitto_client_certificate().
...
Closes #1842 . Thanks to Wolfgang Petroschka.
5 years ago
4472c1f441
Added support for controlling UNSUBSCRIBE calls in v5 plugin ACL checks.
5 years ago
6f4e0a1568
mosquitto_passwd: Forbid the ':' character in usernames.
5 years ago
c90e49af1b
Merge remote-tracking branch 'origin/fixes' into develop
5 years ago
54b9571516
Enable TLS with certfile+keyfile, not capath/cafile.
5 years ago
5371bd09d1
Add support for PBKDF2-SHA512 password hashing.
5 years ago
2774515456
Fix missing mach/mach_time.h header on OS X.
...
Closes #1831 . Thanks to P-Hagen.
5 years ago
97bd527df0
Breaking: allow_anonymous defaults to false.
5 years ago
d7d3087b04
Breaking: Bind to loopback if no listeners are configured.
5 years ago
Roger A. Light