Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2017-08-01 | catch IllegalArgumentException caused by invalid custom hostname | Christian Schneppe | 1 | -7/+4 | |
2017-08-01 | workaround for OpenFire: check CN first in self signed certs | Christian Schneppe | 1 | -5/+32 | |
The self signed certificates created by OpenFire (Not sure if other certs are affected as well) will crash the Java/Android TLS stack when accessing getSubjectAlternativeNames() on the the peer certificate. This usually goes unnoticed in other applications since the DefaultHostnameVerifier checkes the CN first. That however is a violation of RFC6125 section 6.4.4 which requires us to check for the existence of SAN first. This commit adds a work around where in self signed certificates we check for the CN first as well. (Avoiding the call to getSubjectAlternativeNames()) | |||||
2017-08-01 | more migration fixes for updating from 1.6.0 to 1.19.0 | Christian Schneppe | 1 | -1/+1 | |
2017-08-01 | add reminder to remove minidns workarounds once those are fixed | Christian Schneppe | 1 | -0/+1 | |
2017-08-01 | fixed bug in db migrations when going from <15 to something recent | Christian Schneppe | 1 | -5/+7 | |
2017-08-01 | verify with hostname in direct tls connections | Christian Schneppe | 1 | -1/+1 | |
2017-08-01 | prefer DNS servers from VPNs | Christian Schneppe | 2 | -5/+10 | |
2017-08-01 | throw state changing exception on failed tls only if no more connection ↵ | Christian Schneppe | 1 | -1/+3 | |
options left | |||||
2017-08-01 | catch runtime exceptions from minidns | Christian Schneppe | 1 | -4/+4 | |
2017-08-01 | sync around Conversation.getLatestMessage() | Christian Schneppe | 1 | -7/+9 | |
2017-08-01 | catch all exceptions around minidns :( | Christian Schneppe | 1 | -6/+6 | |
2017-08-01 | made DNSEC hostname validation opt-in | Christian Schneppe | 2 | -12/+25 | |
2017-08-01 | work around idn short comings in minidns | Christian Schneppe | 2 | -2/+3 | |
2017-08-01 | resolve non-srv domains in resolver class as well | Christian Schneppe | 1 | -7/+43 | |
2017-08-01 | prefer ipv4 over ipv6 | Christian Schneppe | 1 | -0/+7 | |
2017-08-01 | fixed fallback to normal DNS query after DNSSEC failed | Christian Schneppe | 1 | -3/+9 | |
2017-08-01 | update datebubbles | Christian Schneppe | 5 | -43/+72 | |
2017-08-01 | allow users to send PMs in mucs w/o voice | Christian Schneppe | 1 | -1/+3 | |
2017-08-01 | set focusable=false instead of enabled=false for rooms w/o voice | Christian Schneppe | 1 | -4/+10 | |
2017-08-01 | catch state changing error when sending timeout to iq callbacks | Christian Schneppe | 1 | -3/+7 | |
2017-08-01 | do not keep files in waiting when file size exceeds http upload limit in groups | Christian Schneppe | 1 | -0/+3 | |
2017-08-01 | refactored retrieval of default preferences | Christian Schneppe | 4 | -36/+42 | |
2017-08-01 | put settings defaults into resource file | Christian Schneppe | 16 | -49/+81 | |
2017-08-01 | deduplicate disco items before disco#info | Christian Schneppe | 1 | -1/+7 | |
2017-08-01 | make scan barcode icon survive rotations | Christian Schneppe | 1 | -0/+11 | |
2017-08-01 | show scan button in TrustKeys only if there is something to scan | Christian Schneppe | 1 | -1/+24 | |
2017-08-01 | add publish-options helper class | Christian Schneppe | 2 | -0/+21 | |
2017-08-01 | use DND instead of XA when phone is silent | Christian Schneppe | 2 | -7/+8 | |
2017-06-27 | revised resolver strategy | Christian Schneppe | 1 | -3/+7 | |
2017-06-26 | refactored resolver to fall back to DNS and use reliable method | Christian Schneppe | 1 | -11/+35 | |
2017-06-26 | use ResolverApi.reliable(..) | Christian Schneppe | 1 | -31/+11 | |
2017-06-25 | deduplicate notifications | Christian Schneppe | 1 | -1/+0 | |
2017-06-25 | new resolver fall back to normal dns if dnssec verfication fails | Christian Schneppe | 1 | -9/+22 | |
2017-06-25 | fixed fingerprint trust (was messed up after library upgrade) | Christian Schneppe | 5 | -14/+19 | |
2017-06-25 | fixed patterns source code url | Christian Schneppe | 1 | -1/+2 | |
2017-06-25 | Added preference to control Heads-up Notifications | Christian Schneppe | 1 | -1/+2 | |
2017-06-24 | decrease REFRESH_UI_INTERVAL | Christian Schneppe | 1 | -1/+1 | |
2017-06-24 | cleanup nameWithoutVersion() code | Christian Schneppe | 1 | -13/+9 | |
2017-06-24 | don't use version part of identity name in presence selection | Christian Schneppe | 1 | -1/+21 | |
2017-06-24 | fixed ip reporting for dns look ups | Christian Schneppe | 2 | -3/+3 | |
2017-06-24 | also check for hostname in in certs if hostname is from trusted source | Christian Schneppe | 3 | -30/+34 | |
2017-06-24 | upgrade minidns. refactored dns utils | Christian Schneppe | 6 | -324/+273 | |
2017-06-24 | offer to open website if ibb offers oob redirect | Christian Schneppe | 3 | -10/+55 | |
2017-06-24 | mark message as failed after canceling ft w/o transferable | Christian Schneppe | 1 | -0/+2 | |
2017-06-24 | upgrade to signal-protocol-java | Christian Schneppe | 8 | -135/+141 | |
2017-06-24 | revised strategy for http upload read timeout | Christian Schneppe | 1 | -1/+1 | |
2017-06-17 | allow recording of videos from attachment choice too | Christian Schneppe | 3 | -23/+61 | |
2017-06-17 | use osm MapPreview | Christian Schneppe | 1 | -1/+2 | |
2017-06-17 | make http upload read timeout depend on file size | Christian Schneppe | 1 | -3/+5 | |
2017-06-17 | fix resend feature | Christian Schneppe | 1 | -3/+2 | |