Skip to content

O
Openfire
Switch branch/tag
  1. 09 Jun, 2017 4 commits
  3. 16 May, 2017 1 commit
  5. 15 May, 2017 1 commit
  7. 09 May, 2017 1 commit
  9. 04 May, 2017 3 commits
  11. 27 Apr, 2017 2 commits
  13. 26 Apr, 2017 4 commits
  15. 25 Apr, 2017 2 commits
  17. 14 Apr, 2017 2 commits
  19. 13 Apr, 2017 2 commits
  21. 10 Apr, 2017 1 commit
  23. 03 Apr, 2017 1 commit
  25. 29 Mar, 2017 1 commit
    • Guus der Kinderen's avatar
      OF-1305: Make escaping of multibyte characters in LDAP search optional. (#767) · 27dcea60
      Guus der Kinderen authored 
      A new property (ldap.encodeMultibyteCharacters) is introduced that controls if multibyte characters in LDAP search queries are escaped.

Escaping of these characters started with the fix for OF-830, which appears to have caused OF-1305. Although I can't say that escaping of characters is wrong (per RFC 4515), it does cause real-world problems.

This fix defaults to not encoding again (reverting back to the behavior pre OF-830, without affecting other changes made in OF-830).
      27dcea60
  27. 19 Mar, 2017 2 commits
  29. 24 Feb, 2017 4 commits
  31. 18 Feb, 2017 3 commits
  33. 17 Feb, 2017 4 commits
    • Dave Cridland's avatar
      OF-1195 Correct SCRAM supported logic · 17d50e8a
      Dave Cridland authored
      17d50e8a
    • Dave Cridland's avatar
      OF-1278 Do not be such an idiot while recursing (#751) · 166b17c3
      Dave Cridland authored 
      * OF-1278 Recurse more sensibly in SCRAM code

Previously, we called setPassword if (and only if) there was a plaintext password present AND the configuration was for SCRAM hashed passwords only.

However, we would then retest to see if there was a salt present, and then recurse, if there was a plaintext password present.

This meant that if there were pre-existing users (with only plaintext or encrypted passwords) but with no SCRAM information, and the userInfo.salt was unset, recursion would continue indefinitely.

* OF-1278 Recurse more sensibly in SCRAM code

This patch further proofs against infinite recursion, and is more aggressive about SCRAMming pre-existing users.

Recursion is now prevented from being more than one deep, as designed.
      166b17c3
    • akrherz's avatar
      OF-1281 Update bundled JRE to 1.8.0u121 · 49f4aa10
      akrherz authored
      49f4aa10
    • Dave Cridland's avatar
      OF-1271 Copy elements correctly · df106421
      Dave Cridland authored 
      Adding elements and attributes to the new element doesn't work, since reparenting the old elements generates an exception. This exception wasn't logged.

* Exception logged
* id attribute copied, if present.
* Elements copied deeply/properly.

Test stanza:

```
<message xmlns="jabber:client" to="blah@conference.cridland.im" type="groupchat" id="5260">
<body>This is a message with a label.</body>
<custom xmlns='tmp:custom'/>
<custom-attr xmlns='tmp:custom2' attr='value'/>
<custom-child xmlns='tmp:custom3'>
<child>element</child>
</custom-child>
<custom-text xmlns='tmp:custom4'>Text here</custom-text>
</message>
```
      df106421
  35. 16 Feb, 2017 2 commits
    • wroot's avatar
      OF-1270 fix Readme · eefa0f1d
      wroot authored 
      Version and build date are already in the changelog. Other than that Readme is static. Fixed a few links and removed cheerful thanking. When user looks at it online, he hasn't yet downloaded anything. When he has installed it already, thanking for downloading seems out of place.
      eefa0f1d
    • Hal Deadman's avatar
      Avoid NullPointerException if peer certificates array is null · 43da2b45
      Hal Deadman authored 
      Treat null array the same as empty array
      43da2b45

Technounit-GROUP 2023