aboutsummaryrefslogtreecommitdiff
path: root/net/mosquitto
Commit message (Collapse)AuthorAge
* net/mosquitto: Update to 1.6.12Karl Palsson2020-08-19
| | | | | | | | | | | | | | | | | | Security release. From the changelog: - In some circumstances, Mosquitto could leak memory when handling PUBLISH messages. This is limited to incoming QoS 2 messages, and is related to the combination of the broker having persistence enabled, a clean session=false client, which was connected prior to the broker restarting, then has reconnected and has now sent messages at a sufficiently high rate that the incoming queue at the broker has filled up and hence messages are being dropped. This is more likely to have an effect where max_queued_messages is a small value. This has now been fixed. Closes https://github.com/eclipse/mosquitto/issues/1793 Changelog: https://mosquitto.org/blog/2020/08/version-1-6-12-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: update to 1.6.11Karl Palsson2020-08-12
| | | | | | | | Full release notes: https://mosquitto.org/blog/2020/08/version-1-6-11-released/ Variety of generally minor bugfixes, mostly in the broker. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: bump to 1.6.10Karl Palsson2020-06-02
| | | | | | | | | Full changelog at: https://mosquitto.org/blog/2020/05/version-1-6-10-released/ Fixes openssl 3.0 support, Minor fixes, nothing standout as applicable specifically to OpenWrt. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 1.6.9Karl Palsson2020-03-02
| | | | | | | | Full changelog: https://mosquitto.org/blog/2020/02/version-1-6-9-released/ Nothing of particular relevant to OpenWrt, just general fixes. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to version 1.6.8Karl Palsson2019-12-03
| | | | | | | | | | | This is a bugfix release. Full changelog available at: https://mosquitto.org/blog/2019/11/version-1-6-8-released/ Many smaller fixes in various areas, nothing particularly standout as of special interest to OpenWrt. Signed-off-by: Karl Palsson <karlp@etactica.com>
* treewide: Use default PKG_BUILD_DIR when possibleJeffery To2019-10-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This removes lines that set PKG_BUILD_DIR when the set value is no different from the default value. Specifically, the line is removed if the assigned value is: * $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION) The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT if it is set, so now this is identical to the default value. * $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR) if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it the same as the previous case * $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION) This is the same as the default PKG_BUILD_DIR when there is no BUILD_VARIANT. * $(BUILD_DIR)/[name]-$(PKG_VERSION) where [name] is a string that is identical to PKG_NAME [1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* net/mosquitto: drop obsolete libuuid dependencyKarl Palsson2019-10-09
| | | | | | libuuid was dropped as a dependency in mosquitto 1.6.0 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: bump to 1.6.7Karl Palsson2019-09-25
| | | | | | | | | | | | | | | | | | | | Fixes compatibility with newer libwebsockets versions. Fixes performance issues with websockets Fixes potential crash on config reload Fixes CVEs: CVE-2019-11778 and CVE-2019-11779 Various MQTTv5 fixes. Skips releases with critical regressions Changelog for 1.6.7: https://mosquitto.org/blog/2019/09/version-1-6-7-released/ Changelog for 1.6.5: https://mosquitto.org/blog/2019/09/version-1-6-5-released/ Changelog for 1.6.6: https://mosquitto.org/blog/2019/09/version-1-6-6-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: bump to 1.6.4Karl Palsson2019-08-12
| | | | | | | | | Full changelog here: https://mosquitto.org/blog/2019/08/version-1-6-4-released/ Fixes a regression in persistent session handling, and various other regressions related to the mqtt5 support. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: update to 1.6.3Karl Palsson2019-06-19
| | | | | | | | | | | | | | Fixes multiple issues, primarily of interest to OpenWrt: * getrandom issues with and without TLS and glibc See https://github.com/openwrt/packages/issues/9005 and https://github.com/openwrt/packages/pull/9243 Many many many other fixes related to mqttv5/v3.1.1 interactions and mqtt5 support options. Full changelog at: https://mosquitto.org/blog/2019/06/version-1-6-3-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: major upgrade to 1.6.xKarl Palsson2019-05-15
| | | | | | | | | | | | | | | | | | | | | | | | | | Major new release of mosquitto. This release rolls up the initial 1.6.0 release, plus the subsequent build/bug fixes of 1.6.1 and 1.6.2. Original upstream changelogs: https://mosquitto.org/blog/2019/04/version-1-6-released/ https://mosquitto.org/blog/2019/04/version-1-6-1-released/ https://mosquitto.org/blog/2019/04/version-1-6-2-released/ Major features of interest: * MQTTv5 support * performance improvements * ALPN support * OCSP staping support * OpenSSL Engine support * TLSv1.0 support dropped Currently adds two patches to continue supporting OpenSSL engine support being disabled, and a missing header include. These are both tracked upstream and are expected to be dropped in a subsequent release. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: correct config file option nameKarl Palsson2019-04-11
| | | | | | | | | Correct option is "password_file" not "passwd_file" Originally reported as: https://github.com/openwrt/packages/pull/8642 Added the package bump. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to v1.5.8Karl Palsson2019-03-27
| | | | | | | | | | | Full changelog available at: https://github.com/eclipse/mosquitto/blob/v1.5.8/ChangeLog.txt This is a bugfix release. Of likely note to OpenWrt is a bug affecting missing messages on bridges since 1.5.4: https://github.com/eclipse/mosquitto/issues/1174 Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: update to 1.5.7Karl Palsson2019-02-14
| | | | | | | | | | | | This is a minor bugfix release. Full changelog available at: https://mosquitto.org/blog/2019/02/version-1-5-7-released/ Most relevant to OpenWrt are probably: * fixing persistent store bloat * fix sorting of included config files * fix errors related to per_listener_settings Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 1.5.6Karl Palsson2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bugfix and security release. CVE-2018-12551: If Mosquitto is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent authentication and get access to the broker by using the malformed username. In particular, a blank line will be treated as a valid empty username. Other security measures are unaffected. => Users who have only used the mosquitto_passwd utility to create and modify their password files are unaffected by this vulnerability. CVE-2018-12550: If an ACL file is empty, or has only blank lines or comments, then mosquitto treats the ACL file as not being defined, which means that no topic access is denied. Although denying access to all topics is not a useful configuration, this behaviour is unexpected and could lead to access being incorrectly granted in some circumstances. CVE-2018-12546. If a client publishes a retained message to a topic that they have access to, and then their access to that topic is revoked, the retained message will still be delivered to future subscribers. This behaviour may be undesirable in some applications, so a configuration option `check_retain_source` has been introduced to enforce checking of the retained message source on publish. Plus the following bugfixes: * wills not sent to websocket clients * spaces now allowed in bridge usernames * durable clients not receiving offline messages with per_listener_settings==true * compilation with openssl without deprecated apis * TLS working over SOCKS * better comment handling in config files Full changelog available at: https://github.com/eclipse/mosquitto/blob/fixes/ChangeLog.txt#L1 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: bump to 1.5.5Karl Palsson2018-12-18
| | | | | | Security and bug fix. Full changelog available at: https://mosquitto.org/ChangeLog.txt Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: support more acl plugin optionsKarl Palsson2018-11-28
| | | | | | | | | | | | Adds support for acl_plugin, and acl_opt_* options. acl_opt_* requires some care as it relies on the internal behaviour of cfg_load setting environment variables in a certain form. However, given that _all_ of the cfg_load infrastructure relies on that, we can be pretty sure that it won't change in a way that will hurt us. Originally reported as: https://github.com/openwrt/packages/pull/7434 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: install headers for auth plugin developmentDirk Feytons2018-11-12
| | | | Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
* net/mosquitto: bump to 1.5.4Karl Palsson2018-11-09
| | | | | | | | | | | | | | Security and bugfix release. Full release notes available at: https://mosquitto.org/blog/2018/11/version-154-released/ Security: * client certificates not validated for websockets listeners. Bugfixes: * wills with disconnected clients better handled * bridge restart_timeout properly observed Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: add CPE_IDKarl Palsson2018-10-18
| | | | Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 1.5.3Karl Palsson2018-09-26
| | | | | | | | | | | | | | | | | | | | | | Full changelog at https://github.com/eclipse/mosquitto/blob/v1.5.3/ChangeLog.txt Primary change: CVE fix for CVE-2018-12543 - prevent crash on topics that begin with $ but are not $SYS Selected other fixes relevant to OpenWrt since 1.5.1: - Fix retained messages not sent by bridges on outgoing topics at the first connection. Closes #701. - Fix duplicate clients being added to by_id hash before the old client was removed. Closes #645. - Fix excessive CPU usage when the number of sockets exceeds the system limit. Closes #948. - Fix for bridge connections when using WITH_ADNS=yes. - Fix round_robin false behaviour. Closes #481. - Fix segfault on HUP when bridges and security options are configured. Closes #965. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: install pkg-config filesMichael Heimpold2018-09-04
| | | | | | | | | | | | | Install the .pc files to staging directory to help other packages to find the libraries. Since the build does not use CMake, we need to manually install the files and replace two variables using sed. Filed upstream as https://github.com/eclipse/mosquitto/pull/950 Signed-off-by: Michael Heimpold <michael.heimpold@i2se.com> Tested-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: update to 1.5.1Karl Palsson2018-08-20
| | | | | | | | | | | | | | | Bugfix release. Full changelog at: https://mosquitto.org/blog/2018/08/version-151-released/ Of most interest to OpenWrt: * Remove use of AI_ADDRCONFIG, which means the broker can be used on systems where only the loopback interface is defined. * Fix IPv6 addresses not being able to be used as bridge addresses. * Fix problem opening listeners on Pi caused by unsigned char being default. * Fix segfault on startup if bridge CA certificates could not be read. * Fix possible endian issue when reading the memory_limit option. * library and client bugfixes including: https://github.com/openwrt/packages/issues/6765 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: support all the extra options from newest versionKarl Palsson2018-05-07
| | | | | | Import the config conversion script from https://github.com/remakeelectric/owrt_pub_feeds/tree/master/net/mosquitto-next Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to major 1.5 releaseKarl Palsson2018-05-07
| | | | | | | | | | | This is a major release. https://mosquitto.org/blog/2018/05/version-1-5-released/ Performance, configurability, protection from fuzzing and bad data, customizable SSL contexts, all sorts of goodies. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 1.4.15 for CVE fixesKarl Palsson2018-03-01
| | | | | | | | | | See https://mosquitto.org/blog/2018/02/security-advisory-cve-2017-7651-cve-2017-7652/ for full details. patch for reproducible builds had to be rebuilt based on upstream change. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: auto-disable TLS-PSK support if not availableKarl Palsson2018-02-19
| | | | | | | | OpenSSL grew the ability to turn off TLS-PSK support. Make sure that mosquitto turns on/off TLS-PSK support based on this OpenSSL config. Fixes https://github.com/openwrt/packages/issues/5633 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: reproducible build patchesKarl Palsson2017-12-11
| | | | | | | Remove build timestamp. Using currently proposed upstream patch. Signed-off-by: Alexander Couzens <lynxis@fe80.eu> Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: depend on virtual package instead of selectKarl Palsson2017-12-11
| | | | | | | | | Can't use DEPENDS:= +libname when libname is now a virtual package. Switch to plain DEPENDS:= libname. Fixes Github issue 4751 Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: properly use localhost instead of ipv4Karl Palsson2017-08-16
| | | | | | | On some environments, connecting to localhost was resolving to ::1, which didn't match the bind to the explicit 127.0.0.1. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: support more config options in UCIKarl Palsson2017-08-16
| | | | | | | | | | | | | | Added many more UCI config options, particularly for bridge connections The recently introduced username/password options for bridges are kept, even though they have been deprecated upstream for a while. In keeping with this, while support is kept in UCI, the generated mosquitto.conf file will always generate the "modern" remote_username/remote_password options preferred by mosquitto instead. Likewise for bridge clientid and remote_clientid options. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: update to 1.4.14Karl Palsson2017-07-11
| | | | | | | | Fixes a regression due to the CVE fix in the recently released 1.4.13. https://mosquitto.org/2017/07/version-1-4-14-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: update to 1.4.13Karl Palsson2017-07-10
| | | | | | | | | Primarily a bugfix release for a CVE that doesn't affect lede/openwrt, but also includes some websockets perfomance fixes. Release notes at https://mosquitto.org/2017/07/version-1-4-13-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: fix empty client-nossl packageKarl Palsson2017-06-07
| | | | | | | Fallout of PROVIDES handling. Fixes: https://github.com/openwrt/packages/issues/4432 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: bump to 1.4.12 for CVE-2017-7650Karl Palsson2017-05-29
| | | | | | | Dot release, primarily due to CVE-2017-7650 but also rolls up some earlier patches. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquito: bump to 1.4.11Karl Palsson2017-05-05
| | | | | | | | | | Full changelog available at: https://mosquitto.org/2017/02/version-1-4-11-released/ Mostly ipv6 and websockets fixes, but requires a patch (submitted upstream) to work around an accidental glibc dependency upstream. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: support more config fields in init scriptKarl Palsson2017-05-05
| | | | | | | Adds the "notifications" option which is important when connecting mosquitto to rabbitmq for instance. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: Added further security configuration options for bridge sectionDavid Thornley2017-05-05
| | | | Signed-off-by: David Thornley <david.thornley@touchstargroup.com>
* net/mosquitto: use PROVIDES for -client tools alsoKarl Palsson2017-05-05
| | | | | | | | Earlier, PROVIDES handling was clarified for the broker and the library. Use the same style to properly provide the -client-ssl and -client-nossl packages. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: fix provides <=> package name conflictsJo-Philipp Wich2017-01-19
| | | | | | | | | | | | | | | | The virtual package declared by PROVIDES must not have the same name as the variant declaring it, otherwise buildroot will fail with errors like: cp: '.../pkginfo/mosquitto.provides' and '.../pkginfo/mosquitto.provides' are the same file In order to fix the above error, rename the existing "mosquitto" and "libmosquitto" packages into "mosquitto-ssl" and "libmosquitto-ssl" respectively. Also substitute use of $(PKG_NAME) with literal "mosquitto" in Package/* defines to improve readability of the Makefile. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* net/mosquitto: add PROVIDES to daemon and libraryKarl Palsson2017-01-17
| | | | | | | | | | Adding PROVIDES to both the daemon and library and -nossl variants allow downstream packages to simply declare a single dependency. mosquitto-client however, still needs to explicitly depend on the ssl or nossl variant however. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: Fix host UNAME detectionThomas Huehn2017-01-12
| | | | | | | | | | | | This fixes a bug when mosquitto is crosscompiled in LEDE on OS X. UNAME is explicitly executed on the host, when we want it to be treated as a regular linux build. This patch passes the proper UNAME=Linux variable to the mosquitto make file in order to respect linux as cross-compiler. Signed-off-by: Thomas Huehn <thomas@net.t-labs.tu-berlin.de> Reviewed-by: Karl Palsson <karlp@tweak.net.au>
* net/mosquitto: chown data directoryKarl Palsson2016-08-30
| | | | | | | | The package creates a "mosquitto" user, but the support added for persistence creates the data directory as root running the init script. Properly chown the newly created directory to ensure it's writable. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: Bump to 1.4.10Karl Palsson2016-08-26
| | | | | | | | | | Full changelog: http://mosquitto.org/2016/08/version-1-4-10-released/ Relevant changes: libwebsockets 2.0 compatibility openssl 1.1.0 compatibility Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: update maintainer email addressKarl Palsson2016-06-06
| | | | | Signed-off-by: Karl Palsson <karlp@remake.is> Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: bump to v1.4.9Karl Palsson2016-06-06
| | | | | | | Bugfix release. Full changelog available at http://mosquitto.org/2016/06/version-1-4-9-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: support optionally writing pidfilesKarl Palsson2016-04-11
| | | | | | | Uses procd built in pid file support, rather than mosquittos built in support. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: Bump to version 1.4.8Karl Palsson2016-03-07
| | | | | | | Changelog and release notes: http://mosquitto.org/2016/02/version-1-4-8-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: convert init script to procdKarl Palsson2016-03-07
| | | | | | | Adds support for persistence settings. Bumps package version for new init script. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: Include viable stub config fileKarl Palsson2016-03-07
| | | | | | | This should always have been available in the mosquitto package itself. This file needs to exist in basic form to allow the init scripts to even check whether it exists. Signed-off-by: Karl Palsson <karlp@etactica.com>
Powered by cgit, Themed by Ted Yin.