| Thu, 24 Apr 2014 18:32:25 +0200 |
Kim Alvefur |
mod_s2s_auth_dane: Remove non-working bogus handling
|
| Thu, 24 Apr 2014 18:19:09 +0200 |
Kim Alvefur |
mod_s2s_auth_dane: Break out DANE check into a function
|
| Thu, 10 Apr 2014 22:40:11 +0200 |
Kim Alvefur |
mod_s2s_auth_dane: Improve debug message and log it on the session
|
| Mon, 24 Mar 2014 13:04:24 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Merge functionality from mod_s2s_auth_dnssec_srv
|
| Thu, 20 Mar 2014 15:55:37 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Fix typo in debug statement
|
| Thu, 20 Mar 2014 15:31:15 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Pause s2sin while doing SRV and TLSA lookups, fixes race condition (Can haz util.async plz)
|
| Wed, 19 Mar 2014 19:48:06 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Fix tb when no hostname sent by remote
|
| Wed, 19 Mar 2014 14:33:10 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Verify that the SRV is secure
|
| Wed, 19 Mar 2014 14:04:09 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Abort module loading if luaunbound is unavailable
|
| Tue, 18 Mar 2014 16:09:51 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Drop support for domains without SRV for now
|
| Tue, 18 Mar 2014 16:02:24 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Fix for a17c2c4043e5
|
| Tue, 18 Mar 2014 15:54:08 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Skip TLSA lookups if SRV is insecure
|
| Tue, 18 Mar 2014 15:36:23 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Hack for domains without SRV
|
| Tue, 18 Mar 2014 15:20:28 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Don't pass nil to hash functions in case of unsupported selectors
|
| Tue, 18 Mar 2014 15:12:11 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Back to _port._tcp.srvtarget.example.net
|
| Fri, 14 Mar 2014 14:30:33 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Bogus replies should have no RRdata
|
| Fri, 14 Mar 2014 14:23:27 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Comments and TODOs
|
| Fri, 14 Mar 2014 14:18:18 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Make supported DANE usages configurable, default to DANE-EE
|
| Fri, 14 Mar 2014 14:15:56 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Simplify, but diverge from DANE-SRV draft. Will now look for _xmpp-server.example.com IN TLSA for both directions
|
| Tue, 11 Mar 2014 21:13:40 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Only invalidate trust if we found any supported DANE records
|
| Sun, 09 Mar 2014 23:17:17 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Improve handling of bogus data
|
| Sun, 09 Mar 2014 23:08:41 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Only do TLSA lookup if it hasn't been attempted already
|
| Sun, 09 Mar 2014 14:09:24 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Fix inverted nil check
|
| Sun, 09 Mar 2014 13:44:29 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Do DANE lookups on outgoing stream features
|
| Sun, 09 Mar 2014 13:43:27 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Improve logging
|
| Sun, 09 Mar 2014 13:42:36 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: More comment changes
|
| Sat, 08 Mar 2014 00:00:26 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Implement experimental method for doing DANE with client certificates on s2sin
|
| Fri, 07 Mar 2014 23:30:34 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Add some comments
|
| Wed, 05 Mar 2014 17:44:27 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Don't allow unencrypted connections if TLSA exists
|
| Wed, 05 Mar 2014 17:42:15 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Verify that the pubkey method exists when the SPKI selector is used
|
| Wed, 05 Mar 2014 17:40:44 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Delay s2sout state machine until we get TLSA reply
|
| Wed, 05 Mar 2014 17:38:36 +0100 |
Kim Alvefur |
mod_s2s_auth_dane: Comment updates
|
