983dc14f2c
Provide help for users trying to bind to privileged ports.
...
Closes #2098 .
5 years ago
2de8c15bc9
Minor build fixes.
5 years ago
f4d088b6d0
Improve logging of pull request.
...
Improve handling of invalid combinations of listener address and bind
interface configurations. Closes #2081 .
5 years ago
8a5de787a7
Merge branch 'fix_interface_binding' of git://github.com/mosterdt/mosquitto into mosterdt-fix_interface_binding
5 years ago
64f697d55d
Fix `tls_version` behaviour not matching documentation.
...
It was setting the exact TLS version to use, not the minimium TLS
version to use.
Closes #2110 . Thanks to Petter Jönsson.
5 years ago
fd2f764d36
Check host address binding before overwriting
...
Signed-off-by: Thomas De Backer <mosterdt@debacker.me>
5 years ago
764aa4e8dc
Correct interface binding
...
Signed-off-by: Thomas De Backer <mosterdt@debacker.me>
5 years ago
4a738f154e
Fix openssl engine not being able to load private key.
...
Closes #2066 . Thanks to Boris Vanhoof.
5 years ago
706a1f3f29
Fix more minor compiler warnings.
5 years ago
a4389fc9ce
Fix SPDX identifiers: EDL-1.0 -> BSD-3-Clause.
...
The two licenses are the same.
5 years ago
886ee6cd0c
Fix `bind_interface` option.
...
Closes #1999 . Thanks to Joerg55.
5 years ago
b7f0161f52
Fix DH group not being set for TLS connections.
...
This meant ciphers using DHE couldn't be used.
Closes #1925 . Closes #1476 . Thanks to Jonathan Sönnerup, Valerii
Demeshko, and sectokia.
5 years ago
1636e47202
libressl does not support SSL_CTX_set_ciphersuites.
5 years ago
26ffe1300a
Various Windows build fixes.
5 years ago
232a759320
Log client port on new connections.
...
Closes #1911 . Thanks to twegener-embertec.
5 years ago
3731535298
Add SPDX license identifiers.
5 years ago
c2f62f03aa
Set SSL_OP_SINGLE_DH_USE to protect against weak dhparam primes.
5 years ago
b7e6638fd8
Add `ciphers_tls1.3` option, to allow setting TLS v1.3 ciphersuites.
...
Closes #1825 . Thanks to Valentin Dimov.
5 years ago
584cf51ba7
Update to EPL-2.0
5 years ago
c09f8ee3a7
We don't really mind if this fails.
5 years ago
0c6365726f
Coverity Scan issues.
...
1436823
1436837
1436843
1432792
1436847
1436848
1436849
5 years ago
d142ff69a6
Fix Coverity Scan issues.
...
511427
1431133
1436823
1436837
1436838
1436929
5 years ago
c3ae8c174f
Simplify net__socket_accept() use.
...
Closes Coverity 1436829.
5 years ago
d26534e22b
Fix Coverity scan issues.
...
1302840
1353078
1431131
1431134
1431135
1436826
1436827
1436828
1436830
1436831
1436834
1436835
1436838
1436839
1436840
1436844
1436846
1436853
1436854
1436859
1436860
1436861
1436863
1436867
5 years ago
b816d46508
Use db as a global var instead of passing to functions.
...
This allows a big swath of ifdefs to be removed. It also means savings as the db var is not passed around all of the time, and makes it easier to remove the final broker call to mosquitto_time() call in packet_mosq.c. In one test this reduced the calls to mosquitto_time() from 295k to 48k.
5 years ago
23d3c2641e
Optimise epoll event to context/listener mapping. Allows quicker lookups.
5 years ago
b2560f5e06
Move certificate loading to its own function.
5 years ago
443275a2d0
Fix more "incorrect" disconnect messages.
5 years ago
4f61f6c161
Fix conversion errors.
5 years ago
c90e49af1b
Merge remote-tracking branch 'origin/fixes' into develop
5 years ago
54b9571516
Enable TLS with certfile+keyfile, not capath/cafile.
5 years ago
d7d3087b04
Breaking: Bind to loopback if no listeners are configured.
5 years ago
3eb60e2e6a
Fix some winsock argument types.
5 years ago
d5aae3eca7
lazy init SSL
...
Signed-off-by: Abilio Marques <abiliojr@gmail.com>
5 years ago
5481575f8b
Fix FormatMessage warnings for Windows.
...
From the FormatMessage() Win32 API documentation: "The lpBuffer
parameter is a pointer to an LPTSTR; you must cast the pointer
to an LPTSTR (for example, (LPTSTR)&lpBuffer)."
https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-formatmessage#parameters
This commit fixes warnings like these:
warning C4047: 'function': 'LPSTR' differs in levels of indirection from 'char **'
warning C4024: 'FormatMessageA': different types for formal and actual parameter 5
Signed-off-by: Sigmund Vik <sigmund_vik@yahoo.com>
5 years ago
762ad432e8
Fix support for openssl 3.0
5 years ago
24e34434a4
Move SSL prepare and accept operations out of deep loop
...
Since all resources are ready, do not need lookup again.
Signed-off-by: Michael Liu <michael.liu.point@gmail.com>
6 years ago
c84d175b3d
Fixes for the poor souls stuck on <c99.
...
Closes #1622 .
6 years ago
c175e836a7
Print openssl error when unable to load server key.
6 years ago
d96543c0b8
Merge branch 'fixes' into develop
6 years ago
b0a065f790
Update changelog. Release page. Bump copyright.
6 years ago
07c54627e9
Print OpenSSL errors in more situations
...
Covers when loading certificates fails, or there are ENGINE problems.
Closes #1552 . Thanks to Michael Richardson.
6 years ago
812c0636d5
Satisfy valgrind when exiting on error.
...
This is when due to not being able to open a listening socket, solved by
calling freeaddrinfo in the error cases.
Closes #1565 . Thanks to back1127.
6 years ago
c0443637e8
Merge branch 'master'
...
Conflicts:
ChangeLog.txt
config.mk
src/context.c
src/loop.c
src/subs.c
test/broker/01-connect-bad-packet.py
test/broker/02-subpub-qos1-bad-pubcomp.py
test/broker/02-subpub-qos1-bad-pubrec.py
test/broker/02-subpub-qos2-bad-puback-1.py
test/broker/02-subpub-qos2-bad-puback-2.py
test/broker/02-subpub-qos2-bad-pubcomp.py
test/broker/02-subpub-qos2.py
test/broker/07-will-null-topic.py
6 years ago
d49988fa6f
Rejig unix socket support.
6 years ago
17c32d89d9
Restrict access to unix socket.
6 years ago
499e2f2e98
Add support for unix sockets to broker, lib, and clients.
6 years ago
cfacd961c9
Only a single CRL could be loaded at once. This has been fixed.
...
Closes #1442 . Thanks to charlemagnelasse.
6 years ago
5941291bd5
Fix build WITH_TLS=no
6 years ago
4dc98c4cef
Fix CRL file not being reloaded on HUP.
...
Closes #35 .
6 years ago
Roger A. Light
Thomas De Backer
Abilio Marques
Sigmund Vik
Michael