Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-06-08 | Use public_key to verify client hostname | Raimo Niskanen | |
2018-05-21 | ssl: Fix usage of erl_epmd in tls dist | Lukas Larsson | |
Fixes: 662f3c7ba50ff8ec13d8 | |||
2018-05-16 | epmd: allow alternative to dns resolving for nodename | Timmo Verlaan | |
This makes it possible to create a custom integration with a key-value store for example. The key would then point to the actual address. You would have to write your own epmd module to make use of that feature. | |||
2018-04-26 | Allow check for node name | Raimo Niskanen | |
2018-04-26 | Move check ip to before SSL handshake | Raimo Niskanen | |
2018-04-26 | Check client IP from server | Raimo Niskanen | |
2018-04-24 | Parse cert primarily for host names | Raimo Niskanen | |
2018-04-23 | Open for host and node allow list | Raimo Niskanen | |
2018-04-20 | Create plug-in for distro cert nodes | Raimo Niskanen | |
2018-04-19 | Rewrite TLS dist to handle node names in certs | Raimo Niskanen | |
2017-12-04 | Polish SSL distribution | Raimo Niskanen | |
2017-12-04 | Use SNI when connecting | Raimo Niskanen | |
2017-12-04 | Use -ssl_dist_optfile options | Raimo Niskanen | |
2017-10-23 | Merge branch 'maint' | Ingela Anderton Andin | |
Conflicts: lib/ssl/src/inet_tls_dist.erl | |||
2017-10-20 | ssl: Do not provide IP address to ssl:connect in erlang distribution over TLS | Ingela Anderton Andin | |
As TLS clients will perform a hostname check against certificates the IP-address does not make much sense. | |||
2017-09-28 | Disable debug function | Raimo Niskanen | |
2017-09-27 | Remove ssl_tls_dist_ctrl module | Raimo Niskanen | |
2017-09-26 | Remove ssl_tls_dist_ctrl process | Raimo Niskanen | |
2017-09-15 | Remove ssl_tls_dist_proxy | Raimo Niskanen | |
2017-09-15 | Separate in and out in dist ctrl | Raimo Niskanen | |
2017-09-15 | Rewrite dist ctrl from port to process | Raimo Niskanen | |
2016-05-25 | Use the -epmd_module flag consistently | Magnus Henoch | |
If the -epmd_module flag has been specified on the command line, use that module to register and look up node names instead of the default, erl_epmd. Also document this option. | |||
2016-03-15 | update copyright-year | Henrik Nord | |
2016-02-02 | Add inet6_tls_dist, for TLS distribution over IPv6 | Magnus Henoch | |
Generalise much of inet_tls_dist, so that inet6_tls_dist can reuse it. | |||
2015-12-28 | Merge branch 'legoscia/tls_dist_error_reporting' into maint | Zandra | |
* legoscia/tls_dist_error_reporting: Report bad options for outgoing TLS distribution Save error reasons for TLS distribution connections Report bad options for TLS distribution connections OTP-13219 | |||
2015-12-10 | Save error reasons for TLS distribution connections | Magnus Henoch | |
When establishing an outbound connection for TLS distribution, let's hold on to the failure reasons and use them as exit reasons. These exit reasons are normally invisible, but they can be seen in the logs after calling net_kernel:verbose(1). While there are trace messages in the code already, those require recompiling the module with a special flag, which is more cumbersome than changing the net_kernel verbosity level at run time. | |||
2015-11-24 | Merge branch 'legoscia/tls-dist-shutdown' into maint | Zandra | |
* legoscia/tls-dist-shutdown: Adjust shutdown strategies for distribution over TLS OTP-13134 | |||
2015-10-20 | Adjust shutdown strategies for distribution over TLS | Magnus Henoch | |
Change ssl_dist_sup to be considered as a supervisor with infinite shutdown time. Change the ssl_connection_dist instance of tls_connection_sup to have infinite shutdown time. This avoids spurious error messages when shutting down a node that uses distribution over TLS. | |||
2015-06-18 | Change license text to APLv2 | Bruce Yinhe | |
2013-10-31 | Remove extraneous dev debug code left in the close function. | Ken Key | |
We do not need a traceback on every close in inet_tls_dist and this breaks using nodetool in control scripts on SSL clustered nodes | |||
2012-03-30 | Update copyright years | Björn-Egil Dahlberg | |
2012-02-14 | Robustness and improvement to distribution over SSL | Paul Guyot | |
Fix a bug where the caller would timeout and ssl_tls_dist_proxy would crash. Fix a bug where a timeout from the SSL layer would block the distribution forever (typically when a non-SSL node tries to connect to an SSL node). Add this very case as a test (test_server tries to connect to SSL nodes). Run the proxy exclusively on the loopback interface. | |||
2011-10-03 | Remove ssl_prim calls that are remains from the old ssl distribution | Ingela Anderton Andin | |
2011-09-09 | First fully working version | Ingela Anderton Andin | |