Commit Graph

411 Commits

Author SHA1 Message Date
Zaiming (Stone) Shi 4f02947222 fix(conf): add crl related config default values in conf 2022-11-15 13:16:20 +01:00
Zaiming (Stone) Shi bf6ffe103f Merge remote-tracking branch 'origin/release-v43' into release-v44 2022-11-14 14:46:32 +01:00
Thales Macedo Garitezi 5df513f277 refactor: flatten crl_cache config namespace into root 2022-11-14 09:57:04 -03:00
Thales Macedo Garitezi b08d1651ad docs: remove comment
The server will still fetch CRLs on the fly.
2022-11-11 10:50:47 -03:00
Thales Macedo Garitezi c9e05acb4c fix(crl): make http timeout global for all listeners
We make the CRL HTTP timeout the same for all listeners for simplicity
of understanding and implementation.
2022-11-11 10:50:47 -03:00
JimMoen 0748ca1238
chore: fix comment in schema and config file 2022-11-11 14:05:44 +08:00
Thales Macedo Garitezi 445e176898 refactor(crl): rename `s/enable_crl_cache/enable_crl_check/g` 2022-11-10 16:26:06 -03:00
Thales Macedo Garitezi cd053a28d4 docs(crl): add config docs for CRL options 2022-11-08 14:21:18 -03:00
Thales Macedo Garitezi c23c534525 refactor: fix typo, add more detail, rename option to be more clear 2022-11-08 10:42:38 -03:00
Thales Macedo Garitezi 11175b55f8 fix(ocsp): allow disabling ocsp without touching url 2022-11-07 17:50:02 -03:00
Zaiming (Stone) Shi 51a959c3b4 Merge remote-tracking branch 'origin/release-v44' into ocsp-rv44 2022-11-07 10:18:15 +01:00
Zaiming (Stone) Shi 279046c51e Merge remote-tracking branch 'origin/release-v43' into release-v44 2022-11-03 21:58:25 +01:00
Thales Macedo Garitezi af4141bef4 chore(oscp_crl): port OCSP and CRL features to CE repo (re4.4) 2022-11-03 10:10:16 -03:00
Zaiming (Stone) Shi d25b614a93 Merge remote-tracking branch 'origin/release-v43' into release-v44 2022-11-03 11:43:50 +01:00
JimMoen 51c532546c
feat: options for trigger disconnected events by different reasons 2022-11-03 16:43:34 +08:00
Zaiming (Stone) Shi e0db524a10 refactor: change the format of auth_order and acl_order configs 2022-11-02 11:49:55 +01:00
Zaiming (Stone) Shi b95d3bd6f8
Merge pull request #9014 from emqx/main-v4.3
Main v4.3 to Main v4.4 sync
2022-09-20 14:37:37 +02:00
Zaiming (Stone) Shi bbeeafa315 Merge remote-tracking branch 'origin/main-v4.3' into merge-v43-into-v44-h 2022-09-19 20:47:45 +02:00
William Yang 97fb8c1133 perf(TLS): set default sndbuf and recbuf to 4K
Without using default values, sockets will be opened with OS default
buffer sizes. OS default is set by linux aligning to the host memory
size that large memory has larger OS default.

Now more and more user run EMQX in container which has large OS memory
but the container max memory is limited by cgroup that could be very
small amount compared to the OS total memory size.

To eliminate uncertainty, it is better to have the default value set.
2022-09-19 18:53:43 +02:00
William Yang cb607f760a perf(TLS): hibernate TLS process after 5s 2022-09-19 14:53:36 +02:00
Zaiming (Stone) Shi eca211373f Merge remote-tracking branch 'origin/dev/v4.3.18' into dev/v4.4.7 2022-08-08 16:39:09 +02:00
Thales Macedo Garitezi 5e9462afc8 feat: add option to gc after TLS/SSL handshake (4.3)
Port of https://github.com/emqx/emqx/pull/8637
2022-08-04 08:51:50 -03:00
Zaiming (Stone) Shi f47d952d82 Merge main-4.3 to 0803-sync-v4.3-to-v4.4 2022-08-03 13:41:11 +02:00
Zaiming (Stone) Shi 3cd513d74e
Merge pull request #8553 from zmstone/0722-add-ssl-debug
feat: make possible to debug ssl handshake
2022-08-02 12:07:16 +01:00
zhouzb 633f22cda9
Merge branch 'main-v4.4' into sync-4.3 2022-07-29 20:59:23 +08:00
JianBo He e315f1a146 chore: add docs for false_quick_deny 2022-07-29 17:11:36 +08:00
Zaiming (Stone) Shi 935e6e2f36 feat: make possible to debug ssl handshake 2022-07-22 15:00:23 +02:00
zhongwencool 3248cb92e8 Merge branch 'main-v4.3' into sync-4.3-to-4.4 2022-07-19 11:02:11 +08:00
Thales Macedo Garitezi bc132a4275 fix: default config should specify `cacert` file (4.3)
The default configuration had the `cacert` option for the
`ssl.external` listener commented out.  If one is to set `verify =
verify_peer` in that listener without noticing that `cacert` is
unspecified, all connections will fail with:

```
2022-07-11T11:48:28.540807-03:00 [error] supervisor: 'esockd_connection_sup - <0.3971.0>', errorContext: connection_shutdown, reason: {ssl_error,{options,{cacertfile,[]}}}, offender: [{pid,<0.8225.13>},{name,connection},{mfargs,{emqx_connection,start_link,[[{deflate_options,[]},{max_conn_rate,10000},{active_n,100},{zone,external},{proxy_address_header,<<>>},{proxy_port_header,<<>>},{supported_subprotocols,[]}]]}}]
```
2022-07-11 11:50:20 -03:00
Xinyu Liu 565b6b0eb3
Merge branch 'main-v4.4' into copy-of_main-v4.3 2022-06-23 22:44:53 +08:00
firest 746b996de4 feat(exclusive): update schema and conf 2022-06-23 17:03:51 +08:00
Xinyu Liu dc777c68a1
Merge branch 'main-v4.4' into copy-of_main-v4.3 2022-06-20 11:22:58 +08:00
DDDHuang f900e4ea3f feat: add rpc server listener bind ip config 2022-06-01 16:21:41 +08:00
DDDHuang 43b56e82bd feat: add listener bind ip config. 2022-06-01 15:34:29 +08:00
JianBo He 7ee5f90516 Merge tag 'v4.3.15-rc.3' into merge-main-v4.3-into-v4.4 2022-05-27 11:09:11 +08:00
DDDHuang 64a455bf8e fix: old date format style example & some code format 2022-05-26 16:06:04 +08:00
DDDHuang e1ad8aab46 fix: date format funs & logger conf & appup & change log 2022-05-26 13:13:00 +08:00
DDDHuang 4fc5cb2817 fix: rule engine date format fun & date to timestamp 2022-05-26 12:57:53 +08:00
DDDHuang 664ebcc192 fix: log date format by emqx_calendar 2022-05-26 12:57:53 +08:00
DDDHuang 34ec0cc04b fix: logger formatter 2022-05-26 12:57:53 +08:00
Shawn ca842aa869 fix: merge main-v4.3 to main-v4.4 2022-05-23 11:23:27 +08:00
zhongwencool 554548dbfb chore: update emqx.appup.src and changelog 2022-05-05 16:52:33 +08:00
JianBo He 016ca6823b chore: disable configure shared_subscription_strategy for a group 2022-04-08 13:32:20 +08:00
Georgy Sychev 0c74227995 feat(shared_sub): per group strategies and local strategy
Adds backward compatible per group strategy for shared subscriptions
Adds local shared subscription strategy
2022-04-07 13:40:02 +04:00
JianBo He d2684a25c8 chore(psk): update psk_cipher default ciphers 2022-04-06 10:43:27 +08:00
Zaiming (Stone) Shi 43c900bb5a chore: rename more descriptive EQM X to EMQX 2022-02-22 11:16:38 +01:00
Zaiming (Stone) Shi d2840a8aa1 docs: change EMQ X to EMQX in more descriptive info 2022-02-15 22:18:25 +01:00
JimMoen db8131d2a5 revert(emqx_conf): zone.external.max_topic_levels
revert part of changes in 289415b5aa
2021-12-09 20:13:40 +08:00
JimMoen 289415b5aa fix(conf): change `max_topic_levels` default configuration 2021-11-25 09:52:12 +08:00
Zaiming Shi 9832a2ed00 build: show linux distro in BUILT_ON info 2021-10-31 17:21:47 +01:00