summaryrefslogtreecommitdiff
path: root/src/ejabberd_s2s_out.erl (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Add s2s_dhfile to list of known optionsHolger Weiss2015-06-201-1/+1
|
* Add s2s_dhfile option to configuration validatorHolger Weiss2015-06-161-0/+1
|
* Merge pull request #581 from weiss/dh-param-fileAlexey Shchepin2015-06-161-2/+7
|\ | | | | New options: dhfile and s2s_dhfile
| * New options: dhfile and s2s_dhfileHolger Weiss2015-05-261-2/+7
| | | | | | | | | | Let admins specify a file that contains custom parameters for Diffie-Hellman key exchange.
* | Add config validation at startupEvgeniy Khramtsov2015-06-011-20/+61
|/
* ejabberd_s2s_out: Remove Erlang/OTP version checkHolger Weiss2015-04-161-9/+2
| | | | | The version check won't work for Erlang/OTP >= 17; and it's no longer needed, as we don't support versions older than R16 anyway.
* Add compatibility macros for deprecated types (thanks to Alexey)Christophe Romain2015-02-231-1/+1
|
* Update copyright dates to 2015 (EJAB-1733)Badlop2015-01-081-1/+1
|
* Merge pull request #177 from weiss/log-tls-sasl-externalEvgeny Khramtsov2014-04-301-2/+4
|\ | | | | Log TLS status for outgoing s2s with SASL EXTERNAL
| * Log TLS status for outgoing s2s with SASL EXTERNALHolger Weiss2014-04-231-2/+4
| |
* | Merge pull request #181 from weiss/check-tls-before-authEvgeny Khramtsov2014-04-301-1/+3
|\ \ | | | | | | Check TLS state before requesting SASL EXTERNAL for outgoing s2s connections
| * | Check TLS state before requesting SASL EXTERNALHolger Weiss2014-04-241-1/+3
| |/ | | | | | | | | Make sure a remote server can't circumvent "s2s_use_starttls: required" by offering SASL EXTERNAL authentication over a non-TLS connection.
* / Support certificate verification for outgoing s2sHolger Weiss2014-04-281-37/+59
|/ | | | | | | Handle "s2s_use_starttls: required_trusted" the same way for outgoing s2s connections as for incoming connections. That is, check the remote server's certificate (including the host name) and abort the connection if verification fails.
* Merge pull request #160 from runcom/protocol_optionsAlexey Shchepin2014-04-151-2/+14
|\ | | | | Add option to specify openssl options
| * Add option to specify openssl optionsAntonio Murdaca2014-04-081-2/+14
| |
* | Merge pull request #146 from jamielinux/masterbadlop2014-04-111-4/+3
|\ \ | |/ |/| Update FSF address
| * Update FSF addressJamie Nguyen2014-02-221-4/+3
| |
* | Update copyright dates to 2014 (EJAB-1679)Badlop2014-03-131-1/+1
|/
* Support for OpenSSL ciphers list in ejabberd_c2s, ejabberd_s2s_in and ↵Alexey Shchepin2013-11-281-2/+7
| | | | ejabberd_s2s_out
* Change configuration file format to YAMLEvgeniy Khramtsov2013-08-211-25/+54
|
* Make it possible to enable/disable TLS compressionEvgeniy Khramtsov2013-07-171-1/+9
|
* Switch to rebar build toolEvgeniy Khramtsov2013-06-131-0/+1
| | | | | | | | | | | | | | | | Use dynamic Rebar configuration Make iconv dependency optional Disable transient_supervisors compile option Add hipe compilation support Only compile ibrowse and lhttpc when needed Make it possible to generate an OTP application release Add --enable-debug compile option Add --enable-all compiler option Add --enable-tools configure option Add --with-erlang configure option. Add --enable-erlang-version-check configure option. Add lager support Improve the test suite
* Accumulated patch to binarize and indent codeBadlop2013-03-141-766/+790
|
* Update copyright datesAlexey Shchepin2013-01-241-1/+1
|
* Update copyright datesAlexey Shchepin2012-02-231-1/+1
|
* Reorganize the code to shut up the dialyzerEvgeniy Khramtsov2011-09-051-27/+23
|
* update copyright up to 2011Christophe Romain2011-02-141-1/+1
|
* Handle Tigase's unexpected version=1.0 when ejabberd doesn't announce it ↵Badlop2011-01-311-0/+4
| | | | (EJAB-1379)
* Make sure 'closed' event is correctly processed on every stateEvgeniy Khramtsov2010-12-171-1/+1
|
* Option to reject S2S connection if untrusted certificate (EJAB-464)Badlop2010-12-111-1/+1
|
* Include From attribute in the stream header of outgoing S2S connectionsBadlop2010-12-111-3/+4
|
* Add option to require encryption in S2S connections (EJAB-495)Badlop2010-12-111-7/+15
|
* Correct domain_certfile tlsopts modifications for s2s connections (EJAB-1086)Andreas Köhler2010-11-261-4/+5
| | | | | | | | | | | | | | | | * In ejabberd_s2s_out:wait_for_feature_request/2, the domain to use for looking up domain_certfile options is #state.myname and not #state.server * If s2s_certfile is not specified, connect should still be part of the tls options used by ejabberd_s2s_out * Add #state.server to ejabberd_s2s_in processes and store the to attribute in :wait_for_stream/2. Then use that server in :wait_for_feature_request/2 to change the tls options like in ejabberd_s2s_out. Fixes EJAB-1086.
* add find_s2s_bridge hookEvgeniy Khramtsov2010-10-111-2/+37
|
* fixes typo in stop_connection/1Evgeniy Khramtsov2010-09-281-1/+1
|
* When logging s2s out connection attempt or success, log if TLS is usedBadlop2010-07-231-6/+7
|
* New configure option: --enable-nifEvgeniy Khramtsov2010-07-011-1/+1
|
* Remove warning for undefined print_state/1 function for p1_fsm processes ↵Pablo Polvorin2010-04-091-0/+9
| | | | | | (thanks Badlop). Include a identity function as implementation of print_state/1.
* improved s2s connections clean up (EJAB-1202)Evgeniy Khramtsov2010-03-041-24/+30
|
* Fix OTP version detection to work with old supported R10 and R11Badlop2010-01-161-4/+6
| | | | SVN Revision: 2906
* Update year of ProcessOne copyright from 2009 to 2010 (EJAB-1159)Badlop2010-01-121-1/+1
| | | | SVN Revision: 2891
* Provide more detailed log message when s2s stream start fails.Badlop2009-12-281-3/+4
| | | | SVN Revision: 2831
* Fix mistake that disallowed s2s_out connections when using Erlang R12 or older.Badlop2009-10-211-1/+0
| | | | SVN Revision: 2694
* Provide send_timeout_close option in TCP only in R13B or higher (EJAB-926)Badlop2009-10-191-1/+5
| | | | SVN Revision: 2680
* Support gen_tcp send timeout: Close the connection if the other end has ↵Mickaël Rémond2009-10-191-0/+1
| | | | | | disconnected ungracefully or cannot keep up with the rate at which we are sending data (EJAB-926) SVN Revision: 2671
* If s2s fails due to namespace mismatch, show differences to help debugging ↵Badlop2009-10-121-3/+4
| | | | | | the problem. SVN Revision: 2662
* new option added: max_fsm_queue. removed hardcoded FSMLIMITSEvgeniy Khramtsov2009-10-071-5/+10
| | | | SVN Revision: 2645
* Change some error messages.Badlop2009-09-071-2/+4
| | | | SVN Revision: 2587
* Document the new option s2s_dns_options, expressed in seconds (EJAB-994)Badlop2009-08-031-2/+2
| | | | SVN Revision: 2417
* EJAB-994: Implements DNS timeouts and retries.Geoff Cant2009-07-301-5/+29
| | | | SVN Revision: 2404