Commit Graph

2760 Commits

Author SHA1 Message Date
Roger A. Light
9e28eea0a2 Initialise sockpairR/W to invalid in mosquitto_reinitialise()
This avoids closing invalid sockets in `mosquitto_destroy()` on error.

Closes #2326. Thanks to Arrigo Zanette.
2021-09-24 16:50:53 +01:00
Roger A. Light
a73806acd4 App build fix. 2021-09-23 15:04:11 +01:00
Roger A. Light
7b58eee414 Fix problem parsing config files with Windows line endings.
Closes #2297. Thanks to all the people who commented there!
2021-09-23 11:40:40 +01:00
Roger A. Light
330bf6efdc Various fixes around inflight quota management.
Closes #2306. Thanks to canique.
2021-09-22 17:20:24 +01:00
Roger A. Light
7551a29985 Fix LWT messages not being delivered if per_listener_settings was set to true
Closes #2314. Thanks to Marc Hamel.
2021-09-21 22:51:25 +01:00
Roger A. Light
d942ed7eec Fix max_keepalive option not being able to be set to 0. 2021-09-09 12:19:13 +01:00
Roger A. Light
9afeeb1a56 Docker apk upgrade no longer needed. 2021-09-02 09:34:18 +01:00
Roger A. Light
6d96f660bb Web page updates. 2021-09-01 15:02:04 +01:00
Roger A. Light
1638bd34f8 Update docker images
Use alpine:3.14, removing the need to compile cjson ourselves.
Update to libwebsockets 4.2.1.
Update to mosquitto 2.0.12.
2021-09-01 14:34:12 +01:00
Roger A. Light
42acfdad41 Bump version, update web page. 2021-08-31 17:16:52 +01:00
Roger A. Light
c6859366c4 Merge branch 'fixes' 2021-08-31 16:44:24 +01:00
Roger A. Light
d09591d92e Fix reconnecting in some cases when using MOSQ_OPT_TLS_USE_OS_CERTS.
Fix reconnecting failing when MOSQ_OPT_TLS_USE_OS_CERTS was in use, but none
of capath, cafile, psk, nor MOSQ_OPT_SSL_CTX were set, and
MOSQ_OPT_SSL_CTX_WITH_DEFAULTS was set to the default value of true.

Closes #2288. Thanks to Poltorak Serguei.
2021-08-31 15:59:40 +01:00
Roger A. Light
e43d36020f Update plugin configuration documentation.
Closes #2286. Thanks to Karl Palsson.
2021-08-31 10:57:48 +01:00
Roger A. Light
605131502b Fix MOSQ_OPT_SSL_CTX not being able to be set to NULL.
Closes #2289. Thanks to Poltorak Serguei.
2021-08-31 10:45:10 +01:00
Roger A. Light
77af2ecefe Fix mosquitto_ctrl dynsec setDefaultACLAccess command not working. 2021-08-30 22:28:51 +01:00
Roger A. Light
06c84aeb66 CVE-2021-34434 details. 2021-08-30 22:06:32 +01:00
Roger A. Light
37b5aedcb6 Fix for #575314.
Incoming QoS 2 messages that had not completed the QoS flow were not being
checked for ACL access when a clean session=False client was reconnecting.

Closes #575314.
2021-08-30 16:14:27 +01:00
Roger A. Light
9d95cba95e Fix leak. 2021-08-30 14:11:23 +01:00
Roger A. Light
9d6a73f9f7 Fix CONNECT performance with many user-properties.
An MQTT v5 client connecting with a large number of user-property properties
could cause excessive CPU usage, leading to a loss of performance and
possible denial of service. This has been fixed.
2021-08-26 12:17:42 +01:00
Roger Light
32af599c81 Fix $share subscriptions not being recovered for durable clients.
If a plugin had granted ACL subscription access to a
durable/non-clean-session client, then removed that access, the client would
keep its existing subscription. This has been fixed.
2021-08-26 12:17:26 +01:00
Roger A. Light
376226c129 Build warning fixes. 2021-08-26 10:54:03 +01:00
Roger A. Light
756b3fcb08 Document TLS certificate behaviour when using -p 8883. 2021-08-24 23:15:06 +01:00
Roger A. Light
f952d19da1 Fix printf format build warning on MIPS.
Closes #2271. Thanks to Karl Palsson.
2021-08-24 13:58:15 +01:00
Roger A. Light
9b25dd3b0d libressl build fixes.
Closes #2198. Thanks to Theo Buehler.
2021-08-24 13:53:03 +01:00
Roger A. Light
0d1837ebe3 Deconfigure thread mode when the loop thread ends.
Threaded mode is deconfigured when the mosquitto_loop_start() thread ends,
which allows mosquitto_loop_start() to be called again.

Closes #2242. Thanks to Timo Lange.
2021-08-24 11:51:38 +01:00
Roger A. Light
9526b4cf23 Check for file==dir only when reading. 2021-08-23 23:19:37 +01:00
Roger Light
ba2ca33671 Strict protocol compliance fixes, and extensive test suite. 2021-08-23 23:19:28 +01:00
Roger Light
723b5d7081 Fix listener mount_point not being removed on outgoing messages.
Closes #2244. Thanks to alflexRH.
2021-08-22 08:23:13 +01:00
Roger Light
33349010cd Fix linker error 2021-08-22 07:55:10 +01:00
Roger Light
6608e852a1 Fix broker not quiting if password_file is specified as a directory.
Closes #2241. Thanks to Bryan Pearson.
2021-08-21 22:45:39 +01:00
Roger Light
526b8430e2 Fix for #2283.
Closes #2283. Thanks to Heath Raftery.
2021-08-21 20:14:51 +01:00
Roger Light
c01ae67af7 Fix openssl not being linked to dynamic security plugin.
Closes #2277. Thanks to LeSuisse.
2021-08-21 09:45:26 +01:00
Roger Light
035291c595 Signal+reload documentation improvement. 2021-08-21 00:08:20 +01:00
Roger Light
342aa0ad1a Fix installation using WITH_TLS=no.
Closes #2281. Thanks to Matt Turner.
2021-08-20 23:49:59 +01:00
Roger Light
93b2232bb9 Apply max_keepalive to MQTT v3.1.1 and v3.1 clients. 2021-08-20 23:27:14 +01:00
Roger A. Light
ea371564e7 Disable TLS 1.3 when using TLS-PSK, because it isn't correctly config'd. 2021-08-19 17:26:04 +01:00
Roger A. Light
0143db71a1 Fix TLS certs and PSK not being able to be config'd at the same time. 2021-08-19 17:26:04 +01:00
Roger A. Light
a37c8e65d2 TLS-PSK mismatch fix.
Produce an error if a TLS-PSK client tries to connect to a broker
that is not configured with TLS-PSK.
2021-08-19 17:26:04 +01:00
Roger A. Light
fc4099eafa Speed up tests. 2021-08-17 17:11:47 +01:00
Roger A. Light
79542158f4 Fix max_connections option not being correctly counted. 2021-08-17 13:10:18 +01:00
Roger A. Light
2ace833eee Remove duplicate line 2021-08-17 12:26:52 +01:00
Roger A. Light
8589f082d8 Fix CVE references. 2021-08-05 16:10:43 +01:00
Roger Light
17bbca22fb
Merge pull request #2255 from tparker-usgs/master
Disable HTTP2 when building libwebsockets for docker images.
2021-07-28 22:40:50 +01:00
Roger A. Light
eec1ef1c55 Parallelise bridge clean session test. 2021-07-28 15:54:21 +01:00
Roger A. Light
4e146b7b53 Fix possible out of bounds memory reads when reading configuration.
This would happen with a corrupt/crafted configuration file. Unless your
configuration file is writable by untrusted users this is not a risk.

Closes #567213. Thanks to Roland Sako.
2021-07-22 16:43:06 +01:00
Tom Parker
87cba17715 Disable HTTP2 when building libwebsockets for docker images. Works around #1211.
Signed-off-by: Tom Parker <tparker@usgs.gov>
2021-07-15 19:49:35 +00:00
Roger Light
e3158e2b09
Merge pull request #2247 from Begasus/haiku
Haiku build fixes
2021-07-09 14:16:21 +01:00
begasus
0f49a9ff5b Haiku build fixes
Signed-off-by: begasus <begasus@gmail.com>
2021-07-07 12:26:20 +00:00
Roger A. Light
30b54ba124 Add platform limitations section to man page. 2021-06-29 13:51:31 +01:00
Roger A. Light
b7c3d52cd4 Fix letsencrypt case when RENEWED_DOMAINS is empty. 2021-06-10 11:55:01 +01:00