605131502b
Fix MOSQ_OPT_SSL_CTX not being able to be set to NULL.
...
Closes #2289 . Thanks to Poltorak Serguei.
4 years ago
77af2ecefe
Fix `mosquitto_ctrl dynsec setDefaultACLAccess` command not working.
4 years ago
06c84aeb66
CVE-2021-34434 details.
4 years ago
37b5aedcb6
Fix for #575314 .
...
Incoming QoS 2 messages that had not completed the QoS flow were not being
checked for ACL access when a clean session=False client was reconnecting.
Closes #575314 .
4 years ago
9d95cba95e
Fix leak.
4 years ago
9d6a73f9f7
Fix CONNECT performance with many user-properties.
...
An MQTT v5 client connecting with a large number of user-property properties
could cause excessive CPU usage, leading to a loss of performance and
possible denial of service. This has been fixed.
4 years ago
32af599c81
Fix $share subscriptions not being recovered for durable clients.
...
If a plugin had granted ACL subscription access to a
durable/non-clean-session client, then removed that access, the client would
keep its existing subscription. This has been fixed.
4 years ago
376226c129
Build warning fixes.
4 years ago
756b3fcb08
Document TLS certificate behaviour when using `-p 8883`.
4 years ago
f952d19da1
Fix printf format build warning on MIPS.
...
Closes #2271 . Thanks to Karl Palsson.
4 years ago
9b25dd3b0d
libressl build fixes.
...
Closes #2198 . Thanks to Theo Buehler.
4 years ago
0d1837ebe3
Deconfigure thread mode when the loop thread ends.
...
Threaded mode is deconfigured when the mosquitto_loop_start() thread ends,
which allows mosquitto_loop_start() to be called again.
Closes #2242 . Thanks to Timo Lange.
4 years ago
9526b4cf23
Check for file==dir only when reading.
4 years ago
ba2ca33671
Strict protocol compliance fixes, and extensive test suite.
4 years ago
723b5d7081
Fix listener mount_point not being removed on outgoing messages.
...
Closes #2244 . Thanks to alflexRH.
4 years ago
33349010cd
Fix linker error
4 years ago
6608e852a1
Fix broker not quiting if `password_file` is specified as a directory.
...
Closes #2241 . Thanks to Bryan Pearson.
4 years ago
526b8430e2
Fix for #2283 .
...
Closes #2283 . Thanks to Heath Raftery.
4 years ago
c01ae67af7
Fix openssl not being linked to dynamic security plugin.
...
Closes #2277 . Thanks to LeSuisse.
4 years ago
035291c595
Signal+reload documentation improvement.
4 years ago
342aa0ad1a
Fix installation using WITH_TLS=no.
...
Closes #2281 . Thanks to Matt Turner.
4 years ago
93b2232bb9
Apply max_keepalive to MQTT v3.1.1 and v3.1 clients.
4 years ago
ea371564e7
Disable TLS 1.3 when using TLS-PSK, because it isn't correctly config'd.
4 years ago
0143db71a1
Fix TLS certs and PSK not being able to be config'd at the same time.
4 years ago
a37c8e65d2
TLS-PSK mismatch fix.
...
Produce an error if a TLS-PSK client tries to connect to a broker
that is not configured with TLS-PSK.
4 years ago
c862ffec8b
Allow mosquitto_ctrl dynsec module to update passwords in files
4 years ago
42b45e0c89
Build fixes.
4 years ago
fc4099eafa
Speed up tests.
4 years ago
79542158f4
Fix `max_connections` option not being correctly counted.
4 years ago
2ace833eee
Remove duplicate line
4 years ago
fe007b2fe2
Example plugin that forces all messages to be retained.
4 years ago
7dd8e7eb62
Add missing tag
4 years ago
fe4393b104
Merge branch 'abiliojr-bridge_tcp_user_timeout' into develop
4 years ago
3eaed4c730
Merge branch 'bridge_tcp_user_timeout' of git://github.com/abiliojr/mosquitto into abiliojr-bridge_tcp_user_timeout
4 years ago
8589f082d8
Fix CVE references.
4 years ago
4f04f3de92
Add `websockets_origin` option
...
This allows Origin header checking when clients attempt to upgrade from http->websockets.
4 years ago
1633010130
WS build fix.
4 years ago
9a97a5afc4
Improve client protocol version number logging.
...
Protocol version numbers reported in the log when a client connects now
match the MQTT protocol version numbers, not internal Mosquitto values.
4 years ago
14993528ab
Dynsec will generate a config file if it is not found.
4 years ago
17bbca22fb
Merge pull request #2255 from tparker-usgs/master
...
Disable HTTP2 when building libwebsockets for docker images.
4 years ago
713b19b96f
Document output of ctrl dynsec listClients.
4 years ago
40b402e64a
Add the `global_plugin` option.
...
This gives global plugin loaded regardless of `per_listener_settings`.
4 years ago
eec1ef1c55
Parallelise bridge clean session test.
4 years ago
8cd2411ab6
Tests should typically use `listener` instead of `port`.
4 years ago
182384440b
Password salts are now 64 bytes long.
4 years ago
0cdaac0227
Remove unused macro.
4 years ago
945de663a0
Registration of the MOSQ_EVT_CONTROL plugin event is now handled globally.
...
This means only a single plugin can register for a given $CONTROL topic.
4 years ago
2449dc006b
Add `mosquitto_set_clientid` function for security plugins.
...
Signed-off-by: Tobias Assarsson <tobias.assarsson@gmail.com>
4 years ago
4e146b7b53
Fix possible out of bounds memory reads when reading configuration.
...
This would happen with a corrupt/crafted configuration file. Unless your
configuration file is writable by untrusted users this is not a risk.
Closes #567213 . Thanks to Roland Sako.
4 years ago
114588fff8
Log protocol version and ciphers that a client negotiates when connecting.
4 years ago
Roger A. Light
Tobias Assarsson