annotate mod_disable_tls/mod_disable_tls.lua @ 5086:dec4b2e31d1c

mod_rest: Do not allow replies to <iq type=result> from webhooks Replying to a result stanza could cause loops, just as replying to an error. No stanza.name check here but it should be fine since no other kinds of stanzas have type=result, and the boolean logic would most definitely be wrong on the first attempt.
author Kim Alvefur <zash@zash.se>
date Sun, 27 Nov 2022 00:10:38 +0100
parents 25be5fde250f
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1482
25be5fde250f mod_disable_tls: Default to empty set if disable_tls_ports not present in config (fixes traceback)
Matthew Wild <mwild1@gmail.com>
parents: 1481
diff changeset
1 local disable_tls_ports = module:get_option_set("disable_tls_ports", {});
1481
e10e74583b5f mod_disable_tls: New module to disable c2s TLS by port number
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
2
e10e74583b5f mod_disable_tls: New module to disable c2s TLS by port number
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
3 module:hook("stream-features", function (event)
e10e74583b5f mod_disable_tls: New module to disable c2s TLS by port number
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
4 if disable_tls_ports:contains(event.origin.conn:serverport()) then
e10e74583b5f mod_disable_tls: New module to disable c2s TLS by port number
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
5 module:log("error", "Disabling TLS for client on port %d", event.origin.conn:serverport());
e10e74583b5f mod_disable_tls: New module to disable c2s TLS by port number
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
6 event.origin.conn.starttls = false;
e10e74583b5f mod_disable_tls: New module to disable c2s TLS by port number
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
7 end
e10e74583b5f mod_disable_tls: New module to disable c2s TLS by port number
Matthew Wild <mwild1@gmail.com>
parents:
diff changeset
8 end, 1000);