comparison sat/memory/params.py @ 2687:e9cd473a2f46

core (xmpp): server certificate validation: XMPP server certificate is now checked, and connection is refused (by default) if it's not valid. Certificate check can be disabled in the new parameter "Configuration/check_certificate". If certificate checking is disabled, a warning note is sent on every new connection. Twisted and Wokkel are temporarly monkey patched in sat.core.tls_patches module, until modifications are merged upstream.
author Goffi <goffi@goffi.org>
date Sat, 10 Nov 2018 10:16:35 +0100
parents 56f94936df1e
children 378188abe941
comparison
equal deleted inserted replaced
2686:ce1e15d59496 2687:e9cd473a2f46
73 <param name="Priority" value="50" type="int" constraint="-128;127" security="10" /> 73 <param name="Priority" value="50" type="int" constraint="-128;127" security="10" />
74 <param name="%(force_server_param)s" value="" type="string" security="50" /> 74 <param name="%(force_server_param)s" value="" type="string" security="50" />
75 <param name="%(force_port_param)s" value="" type="int" constraint="1;65535" security="50" /> 75 <param name="%(force_port_param)s" value="" type="int" constraint="1;65535" security="50" />
76 <param name="autoconnect" label="%(autoconnect_label)s" value="true" type="bool" security="50" /> 76 <param name="autoconnect" label="%(autoconnect_label)s" value="true" type="bool" security="50" />
77 <param name="autodisconnect" label="%(autodisconnect_label)s" value="false" type="bool" security="50" /> 77 <param name="autodisconnect" label="%(autodisconnect_label)s" value="false" type="bool" security="50" />
78 <param name="check_certificate" label="%(check_certificate_label)s" value="true" type="bool" security="4" />
78 </category> 79 </category>
79 </individual> 80 </individual>
80 </params> 81 </params>
81 """ % { 82 """ % {
82 "category_general": D_("General"), 83 u"category_general": D_(u"General"),
83 "category_connection": D_("Connection"), 84 u"category_connection": D_(u"Connection"),
84 "history_param": C.HISTORY_LIMIT, 85 u"history_param": C.HISTORY_LIMIT,
85 "history_label": D_("Chat history limit"), 86 u"history_label": D_(u"Chat history limit"),
86 "show_offline_contacts": C.SHOW_OFFLINE_CONTACTS, 87 u"show_offline_contacts": C.SHOW_OFFLINE_CONTACTS,
87 "show_offline_contacts_label": D_("Show offline contacts"), 88 u"show_offline_contacts_label": D_(u"Show offline contacts"),
88 "show_empty_groups": C.SHOW_EMPTY_GROUPS, 89 u"show_empty_groups": C.SHOW_EMPTY_GROUPS,
89 "show_empty_groups_label": D_("Show empty groups"), 90 u"show_empty_groups_label": D_(u"Show empty groups"),
90 "force_server_param": C.FORCE_SERVER_PARAM, 91 u"force_server_param": C.FORCE_SERVER_PARAM,
91 "force_port_param": C.FORCE_PORT_PARAM, 92 u"force_port_param": C.FORCE_PORT_PARAM,
92 "new_account_label": D_("Register new account"), 93 u"new_account_label": D_(u"Register new account"),
93 "autoconnect_label": D_("Connect on frontend startup"), 94 u"autoconnect_label": D_(u"Connect on frontend startup"),
94 "autodisconnect_label": D_("Disconnect on frontend closure"), 95 u"autodisconnect_label": D_(u"Disconnect on frontend closure"),
96 u"check_certificate_label": D_(u"Check certificate (don't uncheck if unsure)"),
95 } 97 }
96 98
97 def load_default_params(self): 99 def load_default_params(self):
98 self.dom = minidom.parseString(Params.default_xml.encode("utf-8")) 100 self.dom = minidom.parseString(Params.default_xml.encode("utf-8"))
99 101