core (xmpp): server certificate validation:

XMPP server certificate is now checked, and connection is refused (by default) if it's not valid.
Certificate check can be disabled in the new parameter "Configuration/check_certificate".
If certificate checking is disabled, a warning note is sent on every new connection.
Twisted and Wokkel are temporarly monkey patched in sat.core.tls_patches module, until modifications are merged upstream.
This commit is contained in:
Goffi 2018-11-10 10:16:35 +01:00
commit 1b8345f4af
6 changed files with 131 additions and 28 deletions

View file

@ -1,7 +1,8 @@
All theses changelogs are not exhaustive, please check the Mercurial repository for more details.
v 0.7.0 (NOT RELEASED YET):
This version is a huge gap with previous one, changelog only show a part of novelties
This version is a huge gap with previous one, changelog only show a part of novelties.
This is also the first "general audience" version.
- XEP-0070 implementation (HTTP Auth via XMPP)
- XEP-0184 implementation (Delivery Receipts)
- XEP-0231 implementation (Bits of Binary)
@ -29,6 +30,7 @@ v 0.7.0 (NOT RELEASED YET):
- language detection plugin
- media remote control through MPRIS standard
- generic encryption methods handling in core
- server certificate validation
- jp:
- new debug commands, to monitor stream, call bridge method or send fake signals
- new info/session command, to get data on current session