1. 03 Apr, 2017 1 commit
  2. 29 Mar, 2017 1 commit
    • Guus der Kinderen's avatar
      OF-1305: Make escaping of multibyte characters in LDAP search optional. (#767) · 27dcea60
      Guus der Kinderen authored
      A new property (ldap.encodeMultibyteCharacters) is introduced that controls if multibyte characters in LDAP search queries are escaped.
      
      Escaping of these characters started with the fix for OF-830, which appears to have caused OF-1305. Although I can't say that escaping of characters is wrong (per RFC 4515), it does cause real-world problems.
      
      This fix defaults to not encoding again (reverting back to the behavior pre OF-830, without affecting other changes made in OF-830).
      27dcea60
  3. 19 Mar, 2017 2 commits
  4. 24 Feb, 2017 4 commits
  5. 18 Feb, 2017 3 commits
  6. 17 Feb, 2017 4 commits
    • Dave Cridland's avatar
      OF-1195 Correct SCRAM supported logic · 17d50e8a
      Dave Cridland authored
      17d50e8a
    • Dave Cridland's avatar
      OF-1278 Do not be such an idiot while recursing (#751) · 166b17c3
      Dave Cridland authored
      * OF-1278 Recurse more sensibly in SCRAM code
      
      Previously, we called setPassword if (and only if) there was a plaintext password present AND the configuration was for SCRAM hashed passwords only.
      
      However, we would then retest to see if there was a salt present, and then recurse, if there was a plaintext password present.
      
      This meant that if there were pre-existing users (with only plaintext or encrypted passwords) but with no SCRAM information, and the userInfo.salt was unset, recursion would continue indefinitely.
      
      * OF-1278 Recurse more sensibly in SCRAM code
      
      This patch further proofs against infinite recursion, and is more aggressive about SCRAMming pre-existing users.
      
      Recursion is now prevented from being more than one deep, as designed.
      166b17c3
    • akrherz's avatar
      OF-1281 Update bundled JRE to 1.8.0u121 · 49f4aa10
      akrherz authored
      49f4aa10
    • Dave Cridland's avatar
      OF-1271 Copy elements correctly · df106421
      Dave Cridland authored
      Adding elements and attributes to the new element doesn't work, since reparenting the old elements generates an exception. This exception wasn't logged.
      
      * Exception logged
      * id attribute copied, if present.
      * Elements copied deeply/properly.
      
      Test stanza:
      
      ```
      <message xmlns="jabber:client" to="blah@conference.cridland.im" type="groupchat" id="5260">
      <body>This is a message with a label.</body>
      <custom xmlns='tmp:custom'/>
      <custom-attr xmlns='tmp:custom2' attr='value'/>
      <custom-child xmlns='tmp:custom3'>
      <child>element</child>
      </custom-child>
      <custom-text xmlns='tmp:custom4'>Text here</custom-text>
      </message>
      ```
      df106421
  7. 16 Feb, 2017 5 commits
  8. 13 Feb, 2017 1 commit
  9. 28 Jan, 2017 1 commit
  10. 31 Dec, 2016 4 commits
  11. 30 Dec, 2016 2 commits
  12. 29 Dec, 2016 1 commit
  13. 27 Dec, 2016 1 commit
  14. 22 Dec, 2016 1 commit
    • Guus der Kinderen's avatar
      OF-1254 and OF-1255: Fix various database scripts. (#724) · c3769488
      Guus der Kinderen authored
      * OF-1254: Correct database version in update script 25.
      
      Most database update scripts version 25 identify themselfs incorrectly as 24. This causes the update script to be executed each time that Openfire starts.
      
      * OF-1255: Fix Mysql installation script.
      
      This removes an offending semicolon.
      c3769488
  15. 21 Dec, 2016 6 commits
  16. 20 Dec, 2016 3 commits
    • Dave Cridland's avatar
      Merge pull request #720 from guusdk/OF-512_filetransferproxy · 7aaf1b0f
      Dave Cridland authored
      OF-512: Allow 'reported' streamhost to be modified.
      7aaf1b0f
    • Guus der Kinderen's avatar
      OF-512: Allow 'reported' streamhost to be modified. · 3f76e421
      Guus der Kinderen authored
      The file transfer proxy will listen on, and report, a set of network interfaces. Sometimes, the proxy
      is not reachable on these addresses directly (for instance in a network environment where NAT comes
      into play).
      
      This commit re-purposes the 'xmpp.proxy.externalip' property. Earlier, this was used to make the proxy
      bind to a specific interface. As this is quite similar to the functionality provided by the
      'network.interface' property, 'xmpp.proxy.externalip' now controls only what interface is reported. It
      no longer affect the interface binding process directly. This functionality has also been added to the
      admin console.
      3f76e421
    • akrherz's avatar
      change sync key as per @guusdk suggestion · 508e39e2
      akrherz authored
      508e39e2