rexmpp - A reusable XMPP library

Age	Commit message (Collapse)	Author
2021-10-02	Make libgsasl optional	defanor
	Only EXTERNAL and PLAIN mechanisms are supported without it for now.
2021-10-02	Use libgcrypt for hashing and random	defanor
	Libgsasl will probably be made optional, so another source of random is needed. Libgsasl uses libgcrypt underneath. Gcrypt, unlike nettle, handles random seeding on its own, which would be annoying to implement for different platforms otherwise.
2021-09-25	Implement XEP-0363: HTTP File Upload	defanor

2021-09-22	Reintroduce c-ares as an option for DNS lookups	defanor

2021-09-21	Make libunbound optional	defanor
	Just use gethostbyname when it's disabled. Possibly will add c-ares, getaddrinfo_a, and other options in the future.
2021-09-21	Make DNSSEC trust anchor file configurable	defanor

2021-09-20	Update README, comments, help strings	defanor

2021-09-19	Make GPGME optional	defanor

2021-09-19	Allow to build without ICU (and JID checks)	defanor

2021-09-19	Introduce OpenSSL and no-TLS options, in addition to GnuTLS	defanor
	Also an option to require TLS is added. There's no DANE TLSA checks with OpenSSL yet, TLS session resumptions and ALPN aren't used with it; just basic connections with certificate verification are added. And now SASL EXTERNAL authentication isn't quite usable.
2021-08-29	Update to Debian 11 versions of dependencies	defanor
	Now it builds with newer compiler and library versions, the ones from Debian 11 repositories.
2021-02-11	Add initial JID checks	defanor
	The rexmpp_jid_check function now ensures that JID parts are valid UTF-8 strings, and that only allowed code points (per RFC 8265) are used in those. Though there is a few more checks to perform still.
2020-11-19	Implement XEP-0373: OpenPGP for XMPP	defanor
	Various checks and utility functions should still be added, and it currently relies on gpg(1) for key generation and validation, but PEP-based key distribution and basic OpenPGP functionality are there.
2020-11-14	Remove the c-ares dependency	defanor

2020-11-13	Switch from c-ares to libunbound	defanor
	libunbound supports DNSSEC, which is needed for DANE TLSA: GnuTLS verifies a certificate for the final host, but SRV and A/AAAA records leading to it should be verified as well. c-ares is still used to parse domain names in SRV records, but should be replaced soon.
2020-11-12	Check server certificates using DANE (TLSA)	defanor
	Currently it is just experimental and does not affect the verification (except for adding a delay); perhaps the verification should be made configurable, including an option to rely on DANE.
2020-02-29	Add the draft	defanor