synapse

Commit-Graf

Upphovsman	SHA1	Meddelande	Datum
Jonathan de Jong	4b965c862d	Remove redundant "coding: utf-8" lines (#9786 ) Part of #9744 Removes all redundant `# -- coding: utf-8 --` lines from files, as python 3 automatically reads source code as utf-8 now. `Signed-off-by: Jonathan de Jong <jonathan@automatia.nl>`	3 år sedan
Dan Callahan	1d5f0e3529	Bump black configuration to target py36 (#9781 ) Signed-off-by: Dan Callahan <danc@element.io>	3 år sedan
Patrick Cloke	4ff0201e62	Enable mypy checking for unreachable code and fix instances. (#8432 )	3 år sedan
Richard van der Hoff	c1ef579b63	Add prometheus metrics to track federation delays (#8430 ) Add a pair of federation metrics to track the delays in sending PDUs to/from particular servers.	3 år sedan
Dagfinn Ilmari Mannsåker	a3f11567d9	Replace all remaining six usage with native Python 3 equivalents (#7704 )	3 år sedan
Patrick Cloke	509e381afa	Clarify list/set/dict/tuple comprehensions and enforce via flake8 (#6957 ) Ensure good comprehension hygiene using flake8-comprehensions.	4 år sedan
Brendan Abolivier	36af094017	Linters are hard but in they end they just want what's best for us	4 år sedan
Brendan Abolivier	ef9c275d96	Add a separator for the config warning	4 år sedan
Brendan Abolivier	5820ed905f	Add mention and warning about ACME v1 deprecation to the Synapse config	4 år sedan
timfi	bce557175b	Allow empty federation_certificate_verification_whitelist (#6849 )	4 år sedan
Andrew Morgan	409c62b27b	Add config linting script that checks for bool casing (#6203 ) Add a linting script that enforces all boolean values in the default config be lowercase. This has annoyed me for a while so I decided to fix it.	4 år sedan
Amber Brown	f743108a94	Refactor HomeserverConfig so it can be typechecked (#6137 )	4 år sedan
Amber Brown	850dcfd2d3	Fix well-known lookups with the federation certificate whitelist (#5997 )	4 år sedan
Jorik Schellekens	6d97843793	Config templating (#5900 ) Template config files * Imagine a system composed entirely of x, y, z etc and the basic operations.. Wait George, why XOR? Why not just neq? George: Eh, I didn't think of that.. Co-Authored-By: Erik Johnston <erik@matrix.org>	4 år sedan
Amber Brown	be3b901ccd	Update the TLS cipher string and provide configurability for TLS on outgoing federation (#5550 )	4 år sedan
Richard van der Hoff	16b52642e2	Don't load the generated config as the default. It's too confusing.	4 år sedan
Richard van der Hoff	edea4bb5be	Allow configuration of the path used for ACME account keys. Because sticking it in the same place as the config isn't necessarily the right thing to do.	4 år sedan
Richard van der Hoff	c3c6b00d95	Pass config_dir_path and data_dir_path into Config.read_config. (#5522 ) * Pull config_dir_path and data_dir_path calculation out of read_config_files * Pass config_dir_path and data_dir_path into read_config	4 år sedan
Amber Brown	32e7c9e7f2	Run Black. (#5482 )	4 år sedan
Richard van der Hoff	f8a45302c9	Fix `federation_custom_ca_list` configuration option. Previously, setting this option would cause an exception at startup.	5 år sedan
Richard van der Hoff	e2dfb922e1	Validate federation server TLS certificates by default.	5 år sedan
Andrew Morgan	6824ddd93d	Config option for verifying federation certificates (MSC 1711) (#4967 )	5 år sedan
Andrew Morgan	7998ca3a66	Document using a certificate with a full chain (#4849 )	5 år sedan
Richard van der Hoff	641c409e4e	Fix ACME config for python 2. (#4717 ) Fixes #4675.	5 år sedan
Richard van der Hoff	5f9bdf90fe	Attempt to make default config more consistent The general idea here is that config examples should just have a hash and no extraneous whitespace, both to make it easier for people who don't understand yaml, and to make the examples stand out from the comments.	5 år sedan
Brendan Abolivier	5a707a2f9a	Improve config documentation	5 år sedan
Brendan Abolivier	45bb55c6de	Use a configuration parameter to give the domain to generate a certificate for	5 år sedan
Richard van der Hoff	a4ce91396b	Disable TLS by default (#4614 )	5 år sedan
Richard van der Hoff	32b781bfe2	Fix error when loading cert if tls is disabled (#4618 ) If TLS is disabled, it should not be an error if no cert is given. Fixes #4554.	5 år sedan
Richard van der Hoff	0ca2908653	fix tests	5 år sedan
Richard van der Hoff	4fddf8fc77	Infer no_tls from presence of TLS listeners Rather than have to specify `no_tls` explicitly, infer whether we need to load the TLS keys etc from whether we have any TLS-enabled listeners.	5 år sedan
Richard van der Hoff	086f6f27d4	Logging improvements around TLS certs Log which file we're reading keys and certs from, and refactor the code a bit in preparation for other work	5 år sedan
Amber Brown	6e2a5aa050	ACME Reprovisioning (#4522 )	5 år sedan
Amber Brown	4ffd10f46d	Be tolerant of blank TLS fingerprints config (#4589 )	5 år sedan
Richard van der Hoff	bf1e4d96ad	Fix default ACME config for py2 (#4564 ) Fixes #4559	5 år sedan
Richard van der Hoff	d7e27a1f08	fix typo in config comments (#4557 )	5 år sedan
Richard van der Hoff	7615a8ced1	ACME config cleanups (#4525 ) * Handle listening for ACME requests on IPv6 addresses the weird url-but-not-actually-a-url-string doesn't handle IPv6 addresses without extra quoting. Building a string which you are about to parse again seems like a weird choice. Let's just use listenTCP, which is consistent with what we do elsewhere. * Clean up the default ACME config make it look a bit more consistent with everything else, and tweak the defaults to listen on port 80. * newsfile	5 år sedan
Amber Brown	6bd4374636	Do not generate self-signed TLS certificates by default. (#4509 )	5 år sedan
Amber Brown	6129e52f43	Support ACME for certificate provisioning (#4384 )	5 år sedan
Amber Brown	23b0813599	Require ECDH key exchange & remove dh_params (#4429 ) * remove dh_params and set better cipher string	5 år sedan
Amber Brown	49af402019	run isort	5 år sedan
Jeroen	b7f34ee348	allow self-signed certificates	5 år sedan
Jeroen	07b4f88de9	formatting changes for pep8	5 år sedan
Jeroen	3d605853c8	send SNI for federation requests	5 år sedan
Adrian Tschira	a3f9ddbede	Open certificate files as bytes That's what pyOpenSSL expects on python3 Signed-off-by: Adrian Tschira <nota@notafile.com>	6 år sedan
Matthew Hodgson	5e97ca7ee6	fix typo	6 år sedan
Matthew Hodgson	efd0f5a3c5	tip for generating tls_fingerprints	6 år sedan
Richard van der Hoff	7216c76654	Improve error handling for missing files (#2551 ) `os.path.exists` doesn't allow us to distinguish between permissions errors and the path actually not existing, which repeatedly confuses people. It also means that we try to overwrite existing key files, which is super-confusing. (cf issues #2455, #2379). Use os.stat instead. Also, don't recomemnd the the use of --generate-config, which screws everything up if you're using debian (cf #2455).	6 år sedan
Tyler Smith	df4407d665	Fix typo in config comments. Signed-off-by: Tyler Smith <tylersmith.me@gmail.com>	7 år sedan
Mark Haines	c61ddeedac	Explain how long the servers can cache the TLS fingerprints for	7 år sedan

1 2

75 Incheckningar (4b965c862dc66c0da5d3240add70e9b5f0aa720b)