c506c8335b
Will delay tests and implementation.
7 years ago
b0c60fb6e1
Separate will reading code.
7 years ago
5aabc171b0
Merge branch 'mqtt5' into develop
7 years ago
e862a047a8
Rework TLS engine support.
7 years ago
20894fcbce
Add engine private key password support
...
Some OpenSSL engines (selectable via tls_engine option) may require a
password to make use of private keys created with them in the first place.
The TPM engine for example, will require a password to access the underlying
TPM's Storage Root Key (SRK), which is the root key of a hierarchy of keys
associated with a TPM; it is generated within a TPM and is a non-migratable
key. Each owned TPM contains a SRK, generated by the TPM at the request
of the Owner. [1]
By default, the engine will prompt the user to introduce the SRK password
before any private keys created with the engine can be used. This could
be inconvenient when running on an unattended system.
Here's where the new tls_engine_kpass_sha option comes in handy. The user
can specify a SHA1 hash of its engine private key password via command
line or config file and it will be passed on to the engine directly.
This commit adds support for both clients (libmosquitto) and broker.
[1] https://goo.gl/qQoXBY
Signed-off-by: Nicolás Pernas Maradei <nicopernas@gmail.com>
7 years ago
d5f039ec7c
Add TLS engine and keyform support to mosquitto
...
Add same OpenSSL engine support to mosquitto (server side) previously added to
client side only.
Signed-off-by: Nicolás Pernas Maradei <nicopernas@gmail.com>
7 years ago
f88cc06435
Add TLS engine and keyform support to libmosquitto
...
- Clients can now offload crypto tasks to an external crypto device through
the OpenSSL ENGINE API.
- The keyfiles can now be treated as PEM or ENGINE keys.
- Two new functions were added to libmosquitto to set up the previously
mentioned features.
- Both mosquitto_sub and mosquitto_pub include support to turn on the mentioned
features through command line options.
Signed-off-by: Nicolás Pernas Maradei <nicopernas@gmail.com>
7 years ago
c3c8c99f5d
Fix dropping oversize messages for QoS>0.
7 years ago
1d17ced449
Broker configurable max_packet_size
...
Plus tests.
7 years ago
8fb4ad48b5
Strings for new error codes.
7 years ago
b9b8e0ff2a
Add client support for outgoing maximum packet size.
7 years ago
1877f8a326
Tests and implementation for maximum packet size.
...
This is for broker outgoing connack and publish packets only.
7 years ago
8db16591fa
Test and fix for subscription identifiers not being updated.
...
Closes #1169 . Thanks to Christoph Krey.
7 years ago
66c1e2ccf0
Add mosquitto_unsubscribe_multiple(), plus tests.
7 years ago
c823073be6
v5 unsubscribe test, single topic.
7 years ago
1479c57e34
v5 report reason code=no sub when unsubscribing.
7 years ago
1ec0cea34a
Fix missing reason_code on v5 UNSUBACK.
...
Closes #1167 . Thanks to Christoph Krey.
7 years ago
458a9840ad
Bump version for test release.
7 years ago
baa4642bd3
Generic ptest implementation.
7 years ago
b4a94f5900
Fix some ssl tests.
7 years ago
950ad8d16f
Speed up pattern matching test.
7 years ago
016ce7dca5
Simplify ptest implementation.
7 years ago
e2f269bda8
Test duration printing on ptest.
7 years ago
084062c85e
Merge branch 'fixes' into mqtt5
7 years ago
b6dc4e5780
Fix datatype_read test.
7 years ago
bb914b985c
Fix `mosquitto_topic_matches_sub()` rc with sub=="topic/#abc".
...
This now returns MOSQ_ERR_INVAL as expected.
7 years ago
b6fb2c5824
Fix property write test after function changes.
7 years ago
e72d1d6ff5
Fix `mosquitto_topic_matches_sub()` rc with sub=="topic/#abc".
...
This now returns MOSQ_ERR_INVAL as expected.
7 years ago
04e89450c0
Don't require C99 compiler.
7 years ago
715da28602
Fix include_dir not sorting config files before loading.
...
Thanks to momoskitto.
7 years ago
2e1c2c430f
`per_listener_settings true` must come before other security settings.
...
Produce error if this is not the case. Closes #1164 , thanks to
momoskitto.
7 years ago
9378016b19
Fix build failure when using WITH_ADNS=yes
7 years ago
ff36baa49e
Bump Docker version.
7 years ago
1b5c900e77
Update CVE details and bump version number.
7 years ago
05458eb35d
Fix some unused variable warnings.
7 years ago
a4f68869bf
Fix cmake client build with TLS.
7 years ago
7ff9c3763b
Fix socks build when using cmake.
7 years ago
1c075988ca
Log message for disconnecting a client with invalid UTF-8 topic.
...
Closes #1144 . Thanks to Kris Mattheus.
7 years ago
f952ae3a67
Fixed durable clients being unable to receive messages when offline.
...
This occurred when per_listener_settings was set to true.
Closes #1081 . Thanks to dwin-wangjt.
7 years ago
17b52bd5d1
Windows: Fix possible crash when client disconnects.
...
Closes #1137 . Thanks to Kris Mattheus.
7 years ago
d6a690aa8d
Fix Will not being sent for Websockets clients.
...
Closes #1143 . Thanks to salcedo.
7 years ago
ab8b57ff54
Allow broker to always restart on Windows when using `log_dest file`.
...
Closes #1080 . Thanks to lcouz.
7 years ago
29a1936c77
Fix spaces not being allowed in the bridge remote_username option.
...
Closes #1131 . Thanks to beville.
7 years ago
ce1d0ae364
Man page can now be built on any system.
...
Closes #1139 . Huge thanks to Chris Mayo.
7 years ago
9df6da16ec
Improve documentation of use_identity_as_username.
...
Closes #1134 . Thanks to Adrian P.
7 years ago
c40957a7d8
Fix and tests for CVE-2018-12546.
7 years ago
d8505624d0
Fix and tests for security bug #541870 .
7 years ago
36b5421c59
Fix and tests for security bug #543401 .
7 years ago
84d5028c2e
Include sys/socket.h for AF_INET definition
...
Without this, mosquitto doesn't build on FreeBSD with websockets enabled
Signed-off-by: Steven Lawrance <stl@koffein.net>
7 years ago
5236295159
Handle mismatched handshakes properly.
...
For example, a QoS1 PUBLISH with QoS2 reply.
7 years ago
Roger A. Light
Nicolás Pernas Maradei
Steven Lawrance