Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | ACME config cleanups (#4525) | Richard van der Hoff | 2019-01-30 | 1 | -26/+74 |
| | | | | | | | | | | | | | | | | * Handle listening for ACME requests on IPv6 addresses the weird url-but-not-actually-a-url-string doesn't handle IPv6 addresses without extra quoting. Building a string which you are about to parse again seems like a weird choice. Let's just use listenTCP, which is consistent with what we do elsewhere. * Clean up the default ACME config make it look a bit more consistent with everything else, and tweak the defaults to listen on port 80. * newsfile | ||||
* | Do not generate self-signed TLS certificates by default. (#4509) | Amber Brown | 2019-01-29 | 1 | -43/+18 |
| | |||||
* | Support ACME for certificate provisioning (#4384) | Amber Brown | 2019-01-23 | 1 | -24/+91 |
| | |||||
* | Require ECDH key exchange & remove dh_params (#4429) | Amber Brown | 2019-01-22 | 1 | -40/+0 |
| | | | * remove dh_params and set better cipher string | ||||
* | run isort | Amber Brown | 2018-07-09 | 1 | -5/+6 |
| | |||||
* | Open certificate files as bytes | Adrian Tschira | 2018-04-10 | 1 | -2/+2 |
| | | | | | | That's what pyOpenSSL expects on python3 Signed-off-by: Adrian Tschira <nota@notafile.com> | ||||
* | fix typo | Matthew Hodgson | 2018-01-16 | 1 | -1/+1 |
| | |||||
* | tip for generating tls_fingerprints | Matthew Hodgson | 2017-10-24 | 1 | -0/+6 |
| | |||||
* | Improve error handling for missing files (#2551) | Richard van der Hoff | 2017-10-17 | 1 | -3/+3 |
| | | | | | | | | | | | `os.path.exists` doesn't allow us to distinguish between permissions errors and the path actually not existing, which repeatedly confuses people. It also means that we try to overwrite existing key files, which is super-confusing. (cf issues #2455, #2379). Use os.stat instead. Also, don't recomemnd the the use of --generate-config, which screws everything up if you're using debian (cf #2455). | ||||
* | Fix typo in config comments. | Tyler Smith | 2017-02-11 | 1 | -1/+1 |
| | | | | Signed-off-by: Tyler Smith <tylersmith.me@gmail.com> | ||||
* | Explain how long the servers can cache the TLS fingerprints for | Mark Haines | 2016-10-12 | 1 | -3/+4 |
| | |||||
* | Improve comment formatting | Mark Haines | 2016-10-12 | 1 | -1/+1 |
| | |||||
* | Add config option for adding additional TLS fingerprints | Mark Haines | 2016-10-11 | 1 | -0/+37 |
| | |||||
* | copyrights | Matthew Hodgson | 2016-01-07 | 1 | -1/+1 |
| | |||||
* | Implement configurable stats reporting | Daniel Wagner-Hall | 2015-09-22 | 1 | -1/+1 |
| | | | | | | | | | | SYN-287 This requires that HS owners either opt in or out of stats reporting. When --generate-config is passed, --report-stats must be specified If an already-generated config is used, and doesn't have the report_stats key, it is requested to be set. | ||||
* | Use shorter config key name | Daniel Wagner-Hall | 2015-09-15 | 1 | -3/+3 |
| | |||||
* | Better document the intent of the insecure SSL setting | Daniel Wagner-Hall | 2015-09-09 | 1 | -2/+6 |
| | |||||
* | Allow configuration to ignore invalid SSL certs | Daniel Wagner-Hall | 2015-09-09 | 1 | -0/+4 |
| | | | | | This will be useful for sytest, and sytest only, hence the aggressive config key name. | ||||
* | Merge branch 'master' of github.com:matrix-org/synapse into develop | Erik Johnston | 2015-07-21 | 1 | -2/+2 |
|\ | |||||
| * | typo | Matthew Hodgson | 2015-07-08 | 1 | -2/+2 |
| | | |||||
* | | We don't want semicolons. | Erik Johnston | 2015-07-09 | 1 | -1/+1 |
| | | |||||
* | | remove the tls_certificate_chain_path param and simply support ↵ | Matthew Hodgson | 2015-07-09 | 1 | -21/+9 |
| | | | | | | | | tls_certificate_path pointing to a file containing a chain of certificates | ||||
* | | document tls_certificate_chain_path more clearly | Matthew Hodgson | 2015-07-09 | 1 | -0/+5 |
| | | |||||
* | | oops, context.tls_certificate_chain_file() expects a file, not a certificate. | Matthew Hodgson | 2015-07-08 | 1 | -4/+1 |
| | | |||||
* | | *cough* | Matthew Hodgson | 2015-07-08 | 1 | -2/+3 |
| | | |||||
* | | add new optional config for tls_certificate_chain_path for folks with ↵ | Matthew Hodgson | 2015-07-08 | 1 | -3/+17 |
|/ | | | | intermediary SSL certs | ||||
* | Write a default log_config when generating config | Mark Haines | 2015-04-30 | 1 | -1/+1 |
| | |||||
* | Manually generate the default config yaml, remove most of the commandline ↵ | Mark Haines | 2015-04-30 | 1 | -40/+38 |
| | | | | arguments for synapse anticipating that people will use the yaml instead. Simpify implementing config options by not requiring the classes to hit the super class | ||||
* | Unused import | Erik Johnston | 2015-03-06 | 1 | -1/+1 |
| | |||||
* | Don't look for an TLS private key if we have set --no-tls | Erik Johnston | 2015-03-06 | 1 | -4/+13 |
| | |||||
* | Update copyright notices | Mark Haines | 2015-01-06 | 1 | -1/+1 |
| | |||||
* | Fix pep8 warnings | Mark Haines | 2014-10-30 | 1 | -1/+1 |
| | |||||
* | fix the copyright holder from matrix.org to OpenMarket Ltd, as matrix.org ↵ | Matthew Hodgson | 2014-09-03 | 1 | -1/+1 |
| | | | | hasn't been incorporated in time for launch. | ||||
* | Fix typo when reading TLS config | Mark Haines | 2014-09-02 | 1 | -1/+1 |
| | |||||
* | More helpful error messages for missing config | Mark Haines | 2014-09-02 | 1 | -3/+5 |
| | |||||
* | Use pregenerated DH params when generating config | Mark Haines | 2014-09-01 | 1 | -7/+29 |
| | |||||
* | Fix homeserver config parsing | Mark Haines | 2014-09-01 | 1 | -1/+1 |
| | |||||
* | Add config tree to synapse. Add support for reading config from a file | Mark Haines | 2014-08-31 | 1 | -0/+106 |