2054 Commits

Author SHA1 Message Date
Etoh
7b82802f6f
Merge pull request #225 from bcattaneo/master
Remove NOTICE tag for clientversion messages
2019-02-22 00:21:32 +00:00
c@ttaneo.uy
d87b9d7b93 Remove NOTICE tag for clientversion messages 2019-02-21 20:15:31 -03:00
Alberto Sottile
32085f80a3 Fix: TLS lock icon disappeared when any user disconnected 2019-02-19 12:53:33 +01:00
Alberto Sottile
d7fa6ccf14 TLS cert rotation: reset retry counter after successful rotation 2019-02-19 10:49:58 +01:00
Alberto Sottile
a60e6aac8a TLS cert rotation: attempt to load valid certs for 10 times before disabling TLS 2019-02-19 10:49:58 +01:00
Alberto Sottile
e8d797550b TLS cert rotation: restructure server methods to improve error messages 2019-02-19 10:49:58 +01:00
Alberto Sottile
8b8e45a4d6 TLS cert rotation: check validity after cert update 2019-02-19 10:49:58 +01:00
Alberto Sottile
0b19d526a1 protocols: fix typo in TLS cert rotation code 2019-02-19 10:49:58 +01:00
Alberto Sottile
890e8ea2ab Implement TLS automatic certificate rotation 2019-02-19 10:49:58 +01:00
Alberto Sottile
21e19159e0 TLS server: create public property for certPath 2019-02-19 10:49:58 +01:00
Etoh
14af13c526
Merge pull request #223 from albertosottile/master
Opportunistic TLS support
2019-02-18 22:17:21 +00:00
Alberto Sottile
d66bf878e0 Revert to PySide2 5.12.0 on macOS due to PyInstaller #4040 2019-02-17 14:57:03 +01:00
Alberto Sottile
9e19fcccfa Add missing space in TLS cipher messages 2019-02-17 12:45:20 +01:00
Etoh
7f23ac44e0 Enable high-DPI scaling where available 2019-02-17 11:00:27 +00:00
Etoh
a5c14aa7d9 Fix bug which meant --max-chat-message-length was ignored (#224) 2019-02-16 19:06:49 +00:00
Alberto Sottile
b655085f59 Update third-party-notices 2019-02-16 12:24:15 +01:00
Alberto Sottile
e16775c33b Explicitely set TLS options to None when server config is not valid 2019-02-16 11:55:03 +01:00
Alberto Sottile
0f10161d86 Remove unneeded wrapClientTLS import 2019-02-16 00:27:01 +01:00
Alberto Sottile
9132a9ae56 startTLS: find certifi.where() if embedded in a zip file 2019-02-16 00:08:19 +01:00
Alberto Sottile
2ac6417c50 buildpy2app: include lua subfolder in the app bundle 2019-02-16 00:08:11 +01:00
Alberto Sottile
8d2472bc68 buildpy2app: include cffi in the app bundle 2019-02-16 00:08:03 +01:00
Alberto Sottile
6fa2eb01c1 Travis: add twisted[tls] and certifi modules 2019-02-16 00:07:55 +01:00
Alberto Sottile
303032b913 Amend green lock icon filenames 2019-02-16 00:07:47 +01:00
Alberto Sottile
8882c9bade startTLS: amend messages 2019-02-16 00:07:39 +01:00
Alberto Sottile
0add282db6 startTLS: set font size in dialog only on macOS 2019-02-16 00:07:11 +01:00
Alberto Sottile
b5f191bb68 startTLS: multilanguage strings in certificate dialog 2019-02-16 00:07:05 +01:00
Alberto Sottile
b35a4fec9d startTLS: add custom certificate info dialog 2019-02-16 00:06:57 +01:00
Alberto Sottile
3695c31ec7 startTLS: set lock button appearance on macOS 2019-02-16 00:06:50 +01:00
Etoh
466e8533d6 Add secure connection icon to press for cert details 2019-02-16 00:06:43 +01:00
Alberto Sottile
8d52acbd88 Get exact error value from Twisted if IPv6 listener is dual stack 2019-02-16 00:05:58 +01:00
Alberto Sottile
285428fb03 Check if the server is listening on either IPv4 or IPv6, avoid errors happening in dual stack configurations 2019-02-16 00:05:46 +01:00
Alberto Sottile
cb66180328 startTLS: import and cosmetic fixes 2019-02-16 00:05:25 +01:00
Alberto Sottile
23f4d686f2 startTLS: client-side verification of the certifi bundle 2019-02-16 00:05:15 +01:00
Alberto Sottile
24cb681acd startTLS: add link to 'startTLS-server-certificate-invalid' error message 2019-02-16 00:05:04 +01:00
Alberto Sottile
6dcaf21891 startTLS: drop connection if server certificate is not valid 2019-02-16 00:04:52 +01:00
Alberto Sottile
dbb2b1c9ff startTLS: add accepted ciphers list and remove DH params 2019-02-16 00:04:28 +01:00
Alberto Sottile
9721cf32e4 startTLS: change DH key parameter filename 2019-02-16 00:04:15 +01:00
Alberto Sottile
9b4338146e startTLS: enable Diffie-Hellman based key exchange on server
Following the guidelines reported in the Twisted documentation
here https://twistedmatrix.com/documents/current/core/howto/ssl.html
this commit enables Diffie-Hellman based key exchange on the server.

Before launching the server, a parameters .pem file must be generated
as detailed in https://twistedmatrix.com/documents/18.9.0/api/twisted.internet.ssl.DiffieHellmanParameters.html
by running `openssl dhparam -out dh_param_1024.pem -2 1024`
on the server machine. This parameters file must be placed in the same
path that contains the server certificates.
2019-02-16 00:04:05 +01:00
Alberto Sottile
b19f2eaaac startTLS: set minimum protocol version to TLS 1.2 2019-02-16 00:03:55 +01:00
Alberto Sottile
abaf178fa6 startTLS: get encrypted connection information after handshake 2019-02-16 00:03:44 +01:00
Alberto Sottile
9e59a8500b startTLS: get server certificate only after handshake 2019-02-16 00:03:33 +01:00
Alberto Sottile
e6912dc659 startTLS: separate not-supported messages for client and server 2019-02-16 00:03:23 +01:00
Alberto Sottile
ff3e49b87d startTLS: show negotiated TLS version 2019-02-16 00:02:18 +01:00
Alberto Sottile
3fc9dcf0af startTLS: handle ui messages 2019-02-16 00:02:06 +01:00
Alberto Sottile
0c46f54510 startTLS: making TLS support (and dependencies) optional 2019-02-16 00:01:55 +01:00
Alberto Sottile
2219bcf4dc startTLS: fix server cert loading function 2019-02-16 00:01:32 +01:00
Alberto Sottile
07fd1434ba startTLS: correct certificate loading and validation 2019-02-16 00:01:02 +01:00
Alberto Sottile
dc5c63a57c startTLS: fall back to TCP if server certificate is not validated 2019-02-16 00:00:23 +01:00
Alberto Sottile
f16ceed539 startTLS: support Let's Encrypt certificates 2019-02-16 00:00:14 +01:00
Alberto Sottile
81e0a20047 startTLS: avoid retrying TLS connection if hostname is an IP address 2019-02-16 00:00:04 +01:00