786d468570
MID reuse test.
4 years ago
34b41a3b01
Dynsec: Add ability to deny wildcard subscriptions for a role
4 years ago
dcff8dfd38
Implement plugin wrappers for v2, v3, v4
...
This means the internal plugin interface is simpler and is translated to each of the older interfaces if needed.
4 years ago
3ebc4f851c
Fix test.
4 years ago
8ac11929cc
Merge branch 'master' into develop
4 years ago
b9b065d2cc
Compiler pedantry, and more checks in tests.
4 years ago
9d3f292b39
Send DISCONNECT With session-takeover return code.
...
This is for MQTT v5 clients when a client connects with the same client id.
Closes #2340 . Thanks to hvxl.
4 years ago
5cae4d1d81
Fix broker sending duplicate CONNACK on failed MQTT v5 reauthentication.
...
Closes #2339 . Thanks to hvxl.
4 years ago
3b471c8669
Fix test
4 years ago
a1a190b482
Pointless whitespace tidy.
4 years ago
e01542b6cf
Fix test.
4 years ago
0f2f77c945
Improve idle / mux timeout performance.
4 years ago
07f793a108
Fix protocol checks - bridge and CONNACK responses.
4 years ago
f7a57add81
Add NanoMQ crash test case.
4 years ago
7b58eee414
Fix problem parsing config files with Windows line endings.
...
Closes #2297 . Thanks to all the people who commented there!
4 years ago
330bf6efdc
Various fixes around inflight quota management.
...
Closes #2306 . Thanks to canique.
4 years ago
7551a29985
Fix LWT messages not being delivered if `per_listener_settings` was set to true
...
Closes #2314 . Thanks to Marc Hamel.
4 years ago
4f24ffef2f
Add `disable_client_cert_date_checks` option.
4 years ago
ba936a869d
Add `accept_protocol_versions` option.
4 years ago
f552ec48b1
Add global_max_connections option.
4 years ago
02685d49b6
Add `global_max_clients` option.
...
This allows limiting client sessions globally on the broker.
4 years ago
1c6d74f208
Fix test
4 years ago
aa29b45e70
Merge branch 'master' into develop
4 years ago
37b5aedcb6
Fix for #575314 .
...
Incoming QoS 2 messages that had not completed the QoS flow were not being
checked for ACL access when a clean session=False client was reconnecting.
Closes #575314 .
4 years ago
9d6a73f9f7
Fix CONNECT performance with many user-properties.
...
An MQTT v5 client connecting with a large number of user-property properties
could cause excessive CPU usage, leading to a loss of performance and
possible denial of service. This has been fixed.
4 years ago
32af599c81
Fix $share subscriptions not being recovered for durable clients.
...
If a plugin had granted ACL subscription access to a
durable/non-clean-session client, then removed that access, the client would
keep its existing subscription. This has been fixed.
4 years ago
ba2ca33671
Strict protocol compliance fixes, and extensive test suite.
4 years ago
723b5d7081
Fix listener mount_point not being removed on outgoing messages.
...
Closes #2244 . Thanks to alflexRH.
4 years ago
93b2232bb9
Apply max_keepalive to MQTT v3.1.1 and v3.1 clients.
4 years ago
79542158f4
Fix `max_connections` option not being correctly counted.
4 years ago
eec1ef1c55
Parallelise bridge clean session test.
4 years ago
8cd2411ab6
Tests should typically use `listener` instead of `port`.
4 years ago
49065f03a8
Merge remote-tracking branch 'origin/fixes' into develop
4 years ago
192a092d50
Add support for pattern ACLs to dynsec un/subscription ACLs.
4 years ago
09fe737038
$share subscription with no-local not allowed.
...
Return protocol error if a client attemps to subscribe to a shared
subscription and also sets no-local.
4 years ago
0cd2619401
Add %c and %u support to dynsec publish ACLs.
4 years ago
6502d6e5f4
Add mosquitto_topic_matches_sub_with_pattern()
...
And use it in the default security checks.
4 years ago
1ab6b28e26
Add missing test file.
4 years ago
42163634c7
Fix leak on crafted MQTT v5 CONNECT.
...
If a MQTT v5 client connects with a crafted CONNECT packet a memory leak
will occur.
Thanks to Kathrin Kleinhammer.
4 years ago
cb2623db47
Check whether broker should be started.
4 years ago
0d3870585b
Plugin delayed authentication.
4 years ago
ef7662ca8e
Merge branch 'master' into develop
4 years ago
1677bb85f4
Fix test.
5 years ago
6a4a547892
Fix segfault on client sending malformed CONNACk.
...
CVE-xxxx-xxxx: If an authenticated client connected with MQTT v5 sent a
malformed CONNACK message to the broker a NULL pointer dereference occurred,
most likely resulting in a segfault. This will be updated with the CVE
number when it is assigned.
Affects versions 2.0.0 to 2.0.9 inclusive.
Closes #2163 . Thanks to Bryan Pearson.
5 years ago
7842323c0d
Test fixes.
5 years ago
de9780343b
Add support for MQTT v5 broker->client topic aliases.
...
This is on a first-come-first-served basis for now.
Also broker to bridge topic aliases.
5 years ago
1289d23b66
Convert tests to be able to run on the same broker where possible.
5 years ago
4c60fad52b
Enforce receive maximum on MQTT v5.
5 years ago
fd036b9435
Merge branch 'fixes' into develop
5 years ago
e401def06d
Fix QoS 0 messages not being delivered when max_queued_bytes was configured.
...
Closes #2123 . Thanks to quackgizmo.
5 years ago
Roger A. Light