14271 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Richard van der Hoff	8d0bd9bb60	fix build fails	2019-06-10 16:23:39 +01:00
Richard van der Hoff	e016681221	Tests for SSL certs for federation connections ... Add some tests for bad certificates for federation and .well-known connections	2019-06-10 16:14:20 +01:00
Richard van der Hoff	efe7b3176e	Fix federation connections to literal IP addresses ... turns out we need a shiny version of service_identity to enforce this correctly.	2019-06-10 15:58:35 +01:00
Richard van der Hoff	d11c634ced	clean up impl, and import idna directly	2019-06-10 15:55:12 +01:00
Richard van der Hoff	c2b6e945e1	Share an SSL context object between SSL connections ... This involves changing how the info callbacks work.	2019-06-09 14:01:32 +01:00
Neil Johnson	7c455a86bc	1.0.0rc1	2019-06-07 10:29:32 +01:00
Andrew Morgan	4f581faa98	Automatically retry builds when a buildkite agent is lost (#5380) ... Sometimes the build agents get lost or die (error codes -1 and 2). Retry automatically a maximum of 2 times if this happens. Error code reference: * -1: Agent was lost * 0: Build successful * 1: There was an error in your code * 2: The build stopped abruptly * 255: The build was cancelled	2019-06-07 00:20:17 +01:00
Andrew Morgan	2d1d7b7e6f	Prevent multiple device list updates from breaking a batch send (#5156) ... fixes #5153	2019-06-06 23:54:00 +01:00
Neil Johnson	a11865016e	Set default room version to v4. (#5379) ... Set default room version to v4.	2019-06-06 20:13:47 +01:00
Erik Johnston	1b8cb64393	Merge pull request #5320 from matrix-org/hawkowl/full-schema-v1 ... Make a full SQL schema	2019-06-06 18:35:38 +01:00
Neil Johnson	8acde3dc47	remove bloat	2019-06-06 18:00:06 +01:00
Amber H. Brown	ed872db8df	fix maybe	2019-06-07 02:53:47 +10:00
Andrew Morgan	3719680ee4	Add ability to perform password reset via email without trusting the identity server (#5377) ... Sends password reset emails from the homeserver instead of proxying to the identity server. This is now the default behaviour for security reasons. If you wish to continue proxying password reset requests to the identity server you must now enable the email.trust_identity_server_for_password_resets option. This PR is a culmination of 3 smaller PRs which have each been separately reviewed: * #5308 * #5345 * #5368	2019-06-06 17:34:07 +01:00
Richard van der Hoff	9fbb20a531	Stop hardcoding trust of old matrix.org key (#5374) ... There are a few changes going on here: * We make checking the signature on a key server response optional: if no verify_keys are specified, we trust to TLS to validate the connection. * We change the default config so that it does not require responses to be signed by the old key. * We replace the old 'perspectives' config with 'trusted_key_servers', which is also formatted slightly differently. * We emit a warning to the logs every time we trust a key server response signed by the old key.	2019-06-06 17:33:11 +01:00
Neil Johnson	833c406b9b	Neilj/1.0 upgrade notes (#5371) ... 1.0 upgrade/install notes	2019-06-06 17:23:02 +01:00
Amber H. Brown	837e32ef55	just user dir?	2019-06-07 01:49:25 +10:00
Andrew Morgan	f868c8df03	Regen sample config before kicking off agents (#5370) ... * Regen sample config before kicking off agents * Add changelog	2019-06-06 16:36:28 +01:00
Amber H. Brown	3b6645d3bf	remove background updates that arent needed	2019-06-07 01:20:58 +10:00
Richard van der Hoff	71063a69b8	Fix missing logcontext for PresenceHandler.on_shutdown. (#5369) ... Fixes some warnings, and a scary-looking stacktrace when sytest kills the process.	2019-06-06 14:45:17 +01:00
Erik Johnston	89d3d7b2c0	Merge pull request #5221 from matrix-org/erikj/fix_worker_sytest ... Fix get_max_topological_token to never return None	2019-06-06 13:54:46 +01:00
Brendan Abolivier	8f06344e11	Merge pull request #5089 from dnaf/m-heroes-empty-room-name ... Make /sync return heroes if room name or canonical alias are empty	2019-06-06 11:18:13 +01:00
Erik Johnston	7f08a3523a	Better words	2019-06-06 11:09:38 +01:00
Richard van der Hoff	cb3b381fcb	Merge pull request #5359 from matrix-org/rav/enable_tls_verification ... Validate federation server TLS certificates by default.	2019-06-06 10:50:42 +01:00
Richard van der Hoff	42555bc18b	Merge pull request #5361 from matrix-org/rav/generate_signing_key ... add a script to generate new signing_key files	2019-06-06 10:50:22 +01:00
Brendan Abolivier	7898a1a48d	Add credit in the changelog	2019-06-06 10:34:33 +01:00
Brendan Abolivier	64fa928792	Simplify condition	2019-06-06 10:34:12 +01:00
Brendan Abolivier	b9c43c8463	Merge pull request #5355 from matrix-org/babolivier/heroes_left_members ... Include left members in room summaries' heroes	2019-06-06 10:05:27 +01:00
Richard van der Hoff	99d3497949	Merge pull request #5354 from matrix-org/rav/server_keys/99-room-v5 ... Implement room v5 which enforces signing key validity	2019-06-06 09:42:13 +01:00
Richard van der Hoff	2eb47e5ee7	Merge pull request #5353 from matrix-org/rav/verify_key_logging ... Associate a request_name with each verify request, for logging	2019-06-06 09:33:09 +01:00
Richard van der Hoff	a39be79216	Merge pull request #5362 from matrix-org/rav/fix_custom_ca ... Fix `federation_custom_ca_list` configuration option.	2019-06-05 22:54:41 +01:00
Amber Brown	6362e3af14	add more comments	2019-06-06 04:20:35 +10:00
Richard van der Hoff	7603a706eb	Merge branch 'rav/fix_custom_ca' into rav/enable_tls_verification	2019-06-05 16:32:35 +01:00
Richard van der Hoff	f8a45302c9	Fix federation_custom_ca_list configuration option. ... Previously, setting this option would cause an exception at startup.	2019-06-05 16:19:07 +01:00
Neil Johnson	94f6c674df	Neilj/add r0.5 to versions (#5360) ... * Update _matrix/client/versions to reference support for r0.5.0	2019-06-05 16:11:31 +01:00
Erik Johnston	75538813fc	Fix background updates to handle redactions/rejections (#5352) ... * Fix background updates to handle redactions/rejections In background updates based on current state delta stream we need to handle that we may not have all the events (or at least that `get_events` may raise an exception).	2019-06-06 00:45:46 +10:00
Richard van der Hoff	fb98c05e03	add a script to generate new signing_key files	2019-06-05 15:33:02 +01:00
Richard van der Hoff	b4f1cd31f4	Update sample config	2019-06-05 15:30:10 +01:00
Richard van der Hoff	95ab2eb4a1	Fix notes about well-known and acme (#5357) ... fixes #4951	2019-06-05 15:12:33 +01:00
Richard van der Hoff	e2dfb922e1	Validate federation server TLS certificates by default.	2019-06-05 14:17:50 +01:00
Brendan Abolivier	0a2f522644	Simplify condition	2019-06-05 14:02:29 +01:00
Erik Johnston	d53faa40e9	Merge pull request #5317 from matrix-org/erikj/make_do_auth_non_essential ... Fix handling of failures when calling /event_auth.	2019-06-05 14:01:32 +01:00
Neil Johnson	4650526b5e	Neilj/changelog clean up (#5356) ... * group together key validity refactors	2019-06-05 13:47:03 +01:00
Brendan Abolivier	40596aec0e	Merge branch 'develop' into m-heroes-empty-room-name	2019-06-05 13:38:01 +01:00
Neil Johnson	26713515de	Neilj/mau tracking config explainer (#5284) ... Improve documentation of monthly active user blocking and mau_trial_days	2019-06-05 13:16:23 +01:00
Brendan Abolivier	804f26a9ff	Properly format the changelog	2019-06-05 12:03:01 +01:00
Brendan Abolivier	a412be2bc7	Changelog	2019-06-05 11:53:50 +01:00
Brendan Abolivier	dbbaf25dd3	Do user_id != me checks before deciding whether we should pick heroes from the joined members or the parted ones	2019-06-05 11:50:27 +01:00
Erik Johnston	bc3d6b918b	Add logging when request fails and clarify we ignore errors.	2019-06-05 11:37:51 +01:00
Richard van der Hoff	d18e4ea0d4	Implement room v5 which enforces signing key validity ... Implements [MSC2077](https://github.com/matrix-org/matrix-doc/pull/2077) and fixes #5247 and #4364.	2019-06-05 11:00:47 +01:00
Richard van der Hoff	cea9750d11	Associate a request_name with each verify request, for logging ... Also: * rename VerifyKeyRequest->VerifyJsonRequest * calculate key_ids on VerifyJsonRequest construction * refactor things to pass around VerifyJsonRequests instead of 4-tuples	2019-06-05 10:46:26 +01:00