Skip to content
Snippets Groups Projects
  1. Feb 03, 2025
    • Rob Swindell's avatar
      Throw a JS exception if do_cryptInit() fails · cb0740b1
      Rob Swindell authored
      Catch cryptlib version mismatch gracefully
      cb0740b1
    • Deucе's avatar
      Remove accidental whitespace · e10260bc
      Deucе authored
      No functional change.
      e10260bc
    • Rob Swindell's avatar
      Correct JSDOCS for TLS PSK properties · 7b548fd3
      Rob Swindell authored
      The wrong version nubmer was specified for these new properties - these
      properties were added in v3.20c which is represented numerically as 32002 in
      decimal.
      
      The description of the tls_psk_id property was missing socket_prop_desc.
      7b548fd3
    • Rob Swindell's avatar
    • Deucе's avatar
      Support uid/pw only auth · 94a109ca
      Deucе authored
      There are now two ways to authenticate with the broker:
      1) TLS PSK with a sysop account, and set the password field at the
         MQTT level to the system password (user field, if present is
         ignored).  This is the prefered method as it provides mutual
         authentication and you simply can't steal credentials with MITM.
      2) Synchronet TLS certificate, sysop username and the users password
         followed by a colon, followed by the system password.  The server
         authentication will now depend on the appropriate trust chain in
         the client.  If using a Let's Encrypt certificate for example,
         you can' securely connect to localhost with this method.
      
      tools and libraries tend to allow TLS-PSK with password at the MQTT
      level, many GUI tools do not allow TLS-PSK.
      94a109ca
    • Deucе's avatar
      Use the new TLS PSK flag to control if sock.tls_psk_id is set · 83d6ece4
      Deucе authored
      Now both the "regular" certificate, and PSK will be supported on
      a TLS socket, and it's up to the client to check which was used.
      83d6ece4
    • Deucе's avatar
      Add patch to flag PSK TLS sessions · bfbf3f50
      Deucе authored
      bfbf3f50
  2. Feb 02, 2025
  3. Feb 01, 2025
Loading