Openfire (master)

• 

  Dave Cridland <dave@cridland.net> 08 Mar 2018 abc1eb7f6c34cc6f148a16222ddff4080660a816

  Merge pull request #1040 from guusdk/OF-1191_Mutual-authentication
  OF-1191: Add BOSH mutual authentication config to admin console.
• 

  Dave Cridland <dave@cridland.net> 08 Mar 2018 821736023e77ef32f16133c0bd78e25dcc578d3d

  Merge pull request #1041 from guusdk/OF-1505_TLS-cert-admin-console-stacktrace
  OF-1505: Prevent admin console stacktrace on TLS config page.
• 

  Guus der Kinderen 08 Mar 2018 9bac4126a10456cb994669c310fbdd0e1a9be22c

  OF-1505: Prevent admin console stacktrace on TLS config page.

  • src/web/security-certificate-store-management.jsp (version 9bac4126a10456cb994669c310fbdd0e1a9be22c)
• 

  Guus der Kinderen 08 Mar 2018 37e0e8a914deadfccc3e38b7c7493f22b98545db m

  OF-1191: Add BOSH mutual authentication config to admin console.

  • src/i18n/openfire_i18n_en.properties (version 37e0e8a914deadfccc3e38b7c7493f22b98545db)
  • src/i18n/openfire_i18n_es.properties (version 37e0e8a914deadfccc3e38b7c7493f22b98545db)
  • src/i18n/openfire_i18n_ru_RU.properties (version 37e0e8a914deadfccc3e38b7c7493f22b98545db)
  • src/i18n/openfire_i18n_zh_CN.properties (version 37e0e8a914deadfccc3e38b7c7493f22b98545db)
  • src/web/http-bind.jsp (version 37e0e8a914deadfccc3e38b7c7493f22b98545db)
• 

  Dave Cridland <dave@cridland.net> 08 Mar 2018 62a642c910fad858bb7dc4830a67dc8a1318b9cb

  Merge pull request #1032 from GregDThomas/HZ-9
  HZ-9: Ensure clustering works properly when enabled through the admin UI
• 

  Dave Cridland <dave@cridland.net> 08 Mar 2018 07bebd80c25be44cdccacb1403946b3929363aca

  Merge pull request #1031 from guusdk/OF-1495_Add-SANs
  OF-1495: Add subject alternative names to certs and CSRs
• 

  Guus der Kinderen 08 Mar 2018 6a0b9f59c1b39ebd4051f678acb901e2b55aaff3 m

  OF-1495: Add server identities to Subject Alternative Name extension of cert

  • src/java/org/jivesoftware/openfire/keystore/IdentityStore.java (version 6a0b9f59c1b39ebd4051f678acb901e2b55aaff3)
  • src/java/org/jivesoftware/util/CertificateManager.java (version 6a0b9f59c1b39ebd4051f678acb901e2b55aaff3)
  • src/web/security-keystore-signing-request.jsp (version 6a0b9f59c1b39ebd4051f678acb901e2b55aaff3)
• 

  Guus der Kinderen 08 Mar 2018 3147d63ce22f27fcc3784350efde6ba670395312 m

  OF-1495: Notify user of missing Subject Alternative Name values.
  Depending on what components (plugins) are loaded, the certificate that is used to identify the local
  domain should have additional values in its Subject Alternative Name extension.
  
  This commit adds an information header in the TLS admin console pages when Openfire is serving components
  that are not included in its certificate.

  • src/i18n/openfire_i18n_en.properties (version 3147d63ce22f27fcc3784350efde6ba670395312)
  • src/java/org/jivesoftware/openfire/keystore/IdentityStore.java (version 3147d63ce22f27fcc3784350efde6ba670395312)
  • src/java/org/jivesoftware/util/CertificateManager.java (version 3147d63ce22f27fcc3784350efde6ba670395312)
  • src/web/security-keystore-signing-request.jsp (version 3147d63ce22f27fcc3784350efde6ba670395312)
  • src/web/security-keystore.jsp (version 3147d63ce22f27fcc3784350efde6ba670395312)
• 

  Guus der Kinderen 08 Mar 2018 bed4eed5c445d405c3c438a5963bda0d8644da66 m

  OF-1495: Copy SANs from source certificate into CSR.

  • src/java/org/jivesoftware/openfire/keystore/IdentityStore.java (version bed4eed5c445d405c3c438a5963bda0d8644da66)
  • src/java/org/jivesoftware/util/CertificateManager.java (version bed4eed5c445d405c3c438a5963bda0d8644da66)
• 

  Dave Cridland <dave@cridland.net> 08 Mar 2018 21639a689ce3bd75cacd95e38ddb53155f0e558c

  Merge pull request #1029 from guusdk/OF-1496_Reduce_discovery_complexity
  OF-1496 reduce discovery complexity
• 

  Guus der Kinderen 08 Mar 2018 4b98b442bbbf6f26e959738f9bf85cb108be3af3 m

  OF-1496: Store providers, rather than their provided data.

  • src/java/org/jivesoftware/openfire/disco/IQDiscoInfoHandler.java (version 4b98b442bbbf6f26e959738f9bf85cb108be3af3)
• 

  Dave Cridland <dave@cridland.net> 08 Mar 2018 e92adc6f7b29df32346af4857e3e6d59597a4c85

  Merge pull request #1035 from guusdk/OF-1191_Mutual-authentication
  OF-1191: Use client truststores for c2s-type connections.
• 

  Dave Cridland <dave@cridland.net> 08 Mar 2018 4ddc7fc49a0e689d3f9d6a8e5c5ca97aa1d586ae

  Merge pull request #1034 from guusdk/OF-1501_KeyManager-preference
  OF-1501: Prefer NewSunX509 KeyManager implementation.
• 

  Dave Cridland <dave@cridland.net> 08 Mar 2018 b20ded04e88232c7748370c0df87ef6734d672d4

  Merge pull request #1017 from guusdk/OF-1481_Null-connection-in-session
  OF-1481: Don't attempt to send over a non-existing connection.
• 

  GregDThomas <L1QMLGwXoZbWYnQGGMc3M4> 05 Mar 2018 0afb2d16ede1deb4bfac9722314f40e8aad9c55f m

  HZ-9: Ensure clustering works properly when enabled through the admin UI

  • src/java/org/jivesoftware/openfire/cluster/ClusterManager.java (version 0afb2d16ede1deb4bfac9722314f40e8aad9c55f)
  • src/plugins/hazelcast/src/java/org/jivesoftware/openfire/plugin/util/cache/ClusteredCacheFactory.java (version 0afb2d16ede1deb4bfac9722314f40e8aad9c55f)
  • src/web/system-clustering.jsp (version 0afb2d16ede1deb4bfac9722314f40e8aad9c55f)
• 

  Guus der Kinderen 05 Mar 2018 83c47b30237bca298da62c04faee39cc940c156c m

  OF-1191: Use client truststores for c2s-type connections.

  • src/java/org/jivesoftware/openfire/keystore/CertificateStoreManager.java (version 83c47b30237bca298da62c04faee39cc940c156c)
• 

  Guus der Kinderen 05 Mar 2018 9686f5a1bf3cdea8b7388daecccd8183459b09ff m

  OF-1501: Prefer NewSunX509 KeyManager implementation.

  • src/java/org/jivesoftware/openfire/keystore/IdentityStore.java (version 9686f5a1bf3cdea8b7388daecccd8183459b09ff)
  • src/java/org/jivesoftware/openfire/spi/EncryptionArtifactFactory.java (version 9686f5a1bf3cdea8b7388daecccd8183459b09ff)
• 

  Guus der Kinderen 23 Feb 2018 4093e41010e88981ad669f0eb96de4ddcce714cc m

  OF-1496: Remove no-op invocation.
  This invocation added data to a copy of the source material, instead of the source itself.

  • src/java/org/jivesoftware/openfire/muc/spi/MultiUserChatServiceImpl.java (version 4093e41010e88981ad669f0eb96de4ddcce714cc)
• 

  Guus der Kinderen 23 Feb 2018 f61d905ab9febdf3de00340a30757ed95c25c59b m

  OF-1496: Reduce complexity of service discovery data handling.
  XMPPServer should not expose Service Discovery data providers that do not cover all service discovery information
  that applies to the XMPP domain. It did so, as it only exposed providers that were based on its modules, but not
  other components.

  • src/java/org/jivesoftware/openfire/XMPPServer.java (version f61d905ab9febdf3de00340a30757ed95c25c59b)
  • src/java/org/jivesoftware/openfire/disco/IQDiscoInfoHandler.java (version f61d905ab9febdf3de00340a30757ed95c25c59b)
  • src/java/org/jivesoftware/openfire/disco/IQDiscoItemsHandler.java (version f61d905ab9febdf3de00340a30757ed95c25c59b)
• 

  Guus der Kinderen 13 Feb 2018 ba9ca089b2f179734f68ad5b7f282f85aee4dcd1 m

  OF-1481: Don't attempt to send over a non-existing connection.

  • src/java/org/jivesoftware/openfire/session/LocalSession.java (version ba9ca089b2f179734f68ad5b7f282f85aee4dcd1)