54b9571516
Enable TLS with certfile+keyfile, not capath/cafile.
5 years ago
5371bd09d1
Add support for PBKDF2-SHA512 password hashing.
5 years ago
cf1c156765
New plugin interface
...
This is not specific to authentication, and allows plugins greater flexibility in what events they are interested in. It also adds message handling, and $CONTROL handling.
5 years ago
97bd527df0
Breaking: allow_anonymous defaults to false.
5 years ago
18e79eac22
Use hash_find rather than hash_iter for unpwd check.
5 years ago
b66ffb8039
Move unpwd to security_options struct.
5 years ago
cae55aa381
Make correct allow_anonymous check in pwfile security.
...
We always get passed the client even if it doesn't have a
username/password now.
5 years ago
e54bac2a54
No need to pass separate username/password here.
5 years ago
73cc271d37
Allow auth plugin to see all logins, unless accepted by password file.
5 years ago
b0a065f790
Update changelog. Release page. Bump copyright.
6 years ago
27b4518d7e
Improve password file parsing in the broker and mosqitto_passwd.
...
Closes #1584 . Thanks to panava.
6 years ago
e188a6b500
More whitespace trimming fixes/consolidation.
6 years ago
32969169f7
Trim whitespace from acl topics.
6 years ago
70fd600c3a
Fix trailing whitespace not being trimmed on acl users.
...
Closes #1539 . Thanks to CliveJL and LeonPoon.
6 years ago
d452ea138b
Use presence of password file as indicator for authentication checks.
...
Previously, authentication checks would only take place if usernames
were defined in the password file.
Closes #1545 . Thanks to Timothy Godfrey.
6 years ago
b6119bb759
Check ACL patterns for validity when loading.
...
Closes #1539 . Thanks to Leon Poon.
6 years ago
9584463c75
Fix potential crash when reloading config.
...
Closes #1424 , #1425 . Thanks to JinPingChng and peteakalad.
6 years ago
1a8c44b84f
Fix regression on use of `mosquitto_connect_async()` not working.
...
Closes #1415 and #1422 . Thanks to Karl Palsson, Till Zimmermann and Liam Fry.
6 years ago
4dc98c4cef
Fix CRL file not being reloaded on HUP.
...
Closes #35 .
6 years ago
779c6cc234
Fix leak introduced in previous commit.
6 years ago
f6b22f8248
Fix clients using `use_identity_as_*` being disconnected on SIGHUP.
...
Closes #1402 . Thanks to twegener-embertec.
6 years ago
baf1909ffb
Improve some messages when client disconnects.
7 years ago
320ddc1303
Merge branch 'master'
...
Conflicts:
CMakeLists.txt
ChangeLog.txt
client/Makefile
config.mk
installer/mosquitto.nsi
installer/mosquitto64.nsi
lib/mosquitto.h
lib/mqtt3_protocol.h
lib/util_mosq.c
set-version.sh
snap/snapcraft.yaml
src/bridge.c
src/database.c
src/handle_connack.c
src/loop.c
src/persist.c
test/broker/Makefile
7 years ago
110f4aada6
Don't overwrite disused client state.
7 years ago
2dd24449ad
Fix "unused parameter" warnings.
7 years ago
0941638143
Fix signed/unsigned comparion warnings.
...
Closes #1196 .
7 years ago
ce31269e05
Update changelog, bump version, bump copyright year.
7 years ago
3b6b6d5fa8
Test improvements
...
And some related fixes.
7 years ago
5e8199323b
Fix clients being disconnected when ACLs are in use.
...
This only affects the case where a client connects using a username, and
the anonymous ACL list is defined but specific user ACLs are not
defined.
Closes #1162 . Thanks to quonb.
7 years ago
084062c85e
Merge branch 'fixes' into mqtt5
7 years ago
c40957a7d8
Fix and tests for CVE-2018-12546.
7 years ago
d8505624d0
Fix and tests for security bug #541870 .
7 years ago
36b5421c59
Fix and tests for security bug #543401 .
7 years ago
55ca61f14e
Fix segfault on HUP when bridges and security options are configured.
...
Closes #849 . Closes #965 . Thanks to Wolfgand Hottgenroth and Dustin Sallings.
7 years ago
ecb4006f38
Don't reject ACL patterns without %u or %c, just warn.
...
Using `pattern blah/#` is a legitimate method of getting a global ACL.
We shouldn't be changing behaviour in a fixes release.
7 years ago
88456c655f
Move check whether context is a bridge in front of check whether a listener
...
exists for context. New test now passes.
Signed-off-by: Wolfgang Hottgenroth <wolfgang.hottgenroth@icloud.com>
7 years ago
39170d1181
ACL patterns that do not contain either %c or %u are now rejected.
...
Closes #209 .
Bug: https://github.com/eclipse/mosquitto/issues/209
Signed-off-by: Roger A. Light <roger@atchoo.org>
7 years ago
6c7ecd7e97
Fix compiling without TLS.
8 years ago
2d1667b120
Remove c99-isms due to problems with dependencies.
8 years ago
23230b7b18
Add per-listener acl handling.
8 years ago
f4d238be18
Bump copyright years.
8 years ago
8a22b918c0
Fix Coverity Scan defects.
8 years ago
fd7b08c0eb
Per listener psk_file.
8 years ago
7046691b7d
Reload password files properly.
8 years ago
aa87f3c170
Per listener allow_anonymous.
8 years ago
a571104809
Check correct password list.
8 years ago
57e852db05
Per listener password file.
8 years ago
b4c72e8fc0
Fix HUP disconnecting clients incorrectly.
...
Bug: https://github.com/eclipse/mosquitto/issues/657
8 years ago
8795f063d4
Add ability to deny access to SUBSCRIBE messages.
...
This is as well as the current read/write accesses. Currently for auth
plugins only.
8 years ago
5a267368d7
Merge branch 'master' into develop
8 years ago
Roger A. Light
Wolfgang Hottgenroth