Commit Graph

2984 Commits

Author SHA1 Message Date
Roger A. Light
7ae22c356b Fix mosquitto_rr not honouring -R.
Closes #2893. Thanks to jwinder-ca
2023-09-13 09:02:55 +01:00
Roger A. Light
66c6276735 Fix protocol 2023-09-12 23:11:54 +01:00
Roger A. Light
f09ea91e11 Fix crash on subscribe under certain unlikely conditions.
Closes #2885.
Closes #2881.

Thanks to everybody on those issues.
2023-09-12 23:09:24 +01:00
Roger A. Light
1ed275b1d4 Version 2.0.17 and below post 2023-08-24 01:16:51 +01:00
Roger A. Light
f762a3fd1c Update docker 2023-08-22 08:43:41 +01:00
Roger A. Light
597d64b7fb Bump version. 2023-08-22 08:40:19 +01:00
Roger A. Light
28d96d8ebc Fix max_inflight_messages not being set correctly.
Closes #2876.
2023-08-22 08:39:40 +01:00
Roger A. Light
47ae6dd0e2 Fix mosquitto_passwd -U backup file creation.
Closes #2873.
2023-08-22 08:09:36 +01:00
Roger A. Light
bfb373d774 Fix max_queued_message 0 stopping clients from receiving messages.
Closes #2789. Thanks to Daedaluz.
2023-08-22 07:40:54 +01:00
Roger A. Light
166d1489f2 Update docker 2023-08-16 14:05:47 +01:00
Roger A. Light
9e0831b3ed Merge branch 'fixes' 2023-08-16 14:03:29 +01:00
Roger A. Light
afba3ec9a0 Bump version, update changelog. 2023-08-16 14:01:21 +01:00
Roger A. Light
1f3b23cd60 Fix broken links on security.md
Closes #2855. Thanks to cfi-gb
2023-08-16 14:01:21 +01:00
Roger A. Light
66faab12d5 Document mosquitto_rr -W option
Closes #2839. Thanks to KaeLL
2023-08-16 14:01:21 +01:00
Roger A. Light
20df874604 Remove broken Travis links.
Closes #2867
2023-08-16 14:01:21 +01:00
Roger A. Light
9109e9e0e2 Fix setlinebuf() on Windows 2023-08-16 14:01:21 +01:00
Roger A. Light
3ab0a9a3fd mosquitto_ctrl dynsec init uses open( , O_EXCL | O_CREAT)
This allows us to refuse to open an existing file, without a race
condition.
2023-08-16 14:01:21 +01:00
Roger A. Light
00b24e0eb0 Fix memory leak when clients send v5 CONNECT packets.
This occurs when they have a will message that contains invalid property
types.
2023-08-16 14:01:21 +01:00
Roger A. Light
4f9002c58a Fix UTF-8 control characters test 2023-08-16 14:01:21 +01:00
Roger A. Light
70d713ca07 Fix heap overflow when reading corrupt config with "log_dest file". 2023-08-16 14:01:21 +01:00
Roger A. Light
284db04bc3 Library will no longer allow single level wildcard certificates, e.g. *.com 2023-08-16 14:01:21 +01:00
Roger A. Light
b76c3c7820 Dynsec: Don't allow duplicate c/g/r when loading config 2023-08-16 14:01:21 +01:00
Roger A. Light
8bc047511a Fix any possible case where a json string might be incorrectly loaded. 2023-08-16 14:01:21 +01:00
Roger A. Light
fa9979ce68 Update mosquitto-tls to suggest modern cypher. 2023-08-16 14:01:21 +01:00
Roger A. Light
41db41761d Fix test running under valgrind 2023-08-16 14:01:21 +01:00
Roger A. Light
6113eac95a Fix for CVE-2023-28366 2023-08-16 14:01:21 +01:00
Roger A. Light
b1c29e881e Fix potential file persistence crash.
Identified by OS-TIF audit.

TOB-MOSQ-CR-5
2023-08-16 14:01:21 +01:00
Roger A. Light
a3c680fbb0 Fix for Eclipse #581199 2023-08-16 14:01:21 +01:00
Roger A. Light
411ed41c27 Dynsec: Simplify config load 2023-08-16 14:01:21 +01:00
Roger A. Light
3fc7dce74c Only register with DLT if DLT logging is enabled. 2023-08-16 14:01:21 +01:00
Roger A. Light
67ac8cbe17 mosquitto_memcmp_const is now more constant time. 2023-08-16 14:01:21 +01:00
Roger A. Light
02d36f9946 Broker now validates usernames provided over TLS are valid UTF-8. 2023-08-16 14:01:21 +01:00
Roger A. Light
44b94875b5 mosquitto_passwd uses mkstemp() for backup files. 2023-08-16 14:01:21 +01:00
Roger A. Light
9bb8058578 Reject Will messages that attempt to publish to $CONTROL/. 2023-08-16 14:01:21 +01:00
Roger A. Light
4ca294fd9c Warn on lax permissions on sensitive files.
- Broker will log warnings if sensitive files are world readable/writable, or
  if the owner/group is not the same as the user/group the broker is running
  as. In future versions the broker will refuse to open these files.
2023-08-16 14:01:21 +01:00
Roger Light
4093dad058
Merge pull request #2827 from bdesplanq/fix-engine-support
Fix engine keyfile support.
2023-08-15 14:09:01 +01:00
Roger A. Light
cb90e91126 Add missing mosquitto_strerror entries.
Closes #2799. Thanks to n00b42
2023-08-12 10:12:52 +01:00
Roger Light
9c295efe98
Merge pull request #2838 from NorbertHeusser/fix-no-expiry-on-outgoing-bridge
Do not add outgoing bridge connection context to session expiry list
2023-08-11 23:35:43 +01:00
Roger Light
2f2307f684
Merge pull request #2834 from linkkzz/fix-subcount
Fix sub_count is not decreased when client ubsubscribe
2023-08-11 23:03:35 +01:00
Roger Light
1a781fbf7a
Merge pull request #2846 from CrossStream/sandbox/rzr/review/master
man: Fix typo-in-manual-page noticable noticeable
2023-08-11 22:49:31 +01:00
Philippe Coval
e653f75f67 man: Fix typo-in-manual-page noticable noticeable
This was reported by debian lintian checker

Forwarded: https://github.com/eclipse/mosquitto/pull/2846#Open
Signed-off-by: Philippe Coval <rzr@users.sf.net>
2023-07-10 08:52:51 +02:00
Roger Light
5dceeb94b1
Merge pull request #2845 from CrossStream/sandbox/rzr/review/master
git: Ignore more generated files
2023-07-08 23:36:01 +01:00
Philippe Coval
41a3a2068e git: Ignore more generated files
Signed-off-by: Philippe Coval <rzr@users.sf.net>
2023-07-08 11:47:58 +02:00
Norbert Heusser
c749ed6fd5 Do not add outgoing bridge connection context to session expiry list on disconnect
Signed-off-by: Norbert Heusser <norbert.heusser@cedalo.com>
2023-07-03 11:16:38 +00:00
linkkzz
18ea97c468 Fixes sub_count is not decreased when client ubsubscribe
Signed-off-by: linkkzz <jk588592@163.com>
2023-06-30 11:29:40 +08:00
Bart Desplanques
105e30ff5b Fix engine support.
Do not try to open keyfile when keyform is "engine": this is not necessarily a real file.
Dynamic engines require init with OPENSSL_INIT_ENGINE_DYNAMIC before they can be loaded.

Signed-off-by: Bart Desplanques <bart.desplanques@gmail.com>
2023-06-02 19:11:50 +02:00
Roger A. Light
cc1aac336e Bump remaining official docker images to Alpine 3.18 2023-05-12 23:17:10 +01:00
Roger A. Light
65a6ed43a5 Docker: Bump alpine to 3.18. 2023-05-12 00:02:45 +01:00
Roger A. Light
269756a171 Fix high CPU use on slow TLS connect.
Closes #2794. Thanks to Evgeny S.
2023-04-27 23:25:52 +01:00
Roger A. Light
3c51816009 Fix leak on error. 2023-04-12 11:52:26 +01:00