aboutsummaryrefslogtreecommitdiff
path: root/net/mosquitto
Commit message (Collapse)AuthorAge
* mosquitto: bump PKG_RELEASE since missing in PR #23863David Andreoletti2024-04-13
| | | | Signed-off-by: David Andreoletti <david@andreoletti.net>
* mosquitto: support anonymous user per listenerDavid Andreoletti2024-04-10
| | | | Signed-off-by: David Andreoletti <david@andreoletti.net>
* mosquitto: reenable options wrongly turned offRosen Penev2024-02-04
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* mosquitto: update to 2.0.18Rosen Penev2023-12-01
| | | | | | | | Switch to CMake. Allows faster compilation. Small Makefile cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* net/mosquitto: bump to 2.0.17Karl Palsson2023-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a security and bug fix release. Security: - CVE-2023-28366: Fix memory leak in broker when clients send multiple QoS 2 messages with the same message ID, but then never respond to the PUBREC commands. - CVE-2023-0809: Fix excessive memory being allocated based on malicious initial packets that are not CONNECT packets. - CVE-2023-3592: Fix memory leak when clients send v5 CONNECT packets with a will message that contains invalid property types. - Broker will now reject Will messages that attempt to publish to $CONTROL/. - Broker now validates usernames provided in a TLS certificate or TLS-PSK identity are valid UTF-8. - Fix potential crash when loading invalid persistence file. - Library will no longer allow single level wildcard certificates, e.g. *.com Bugfixes of note or relevance to OpenWrt: - Fix bridges with non-matching cleansession/local_cleansession being expired on start after restoring from persistence. Closes #2634. Client library: - Use CLOCK_BOOTTIME when available, to keep track of time. This solves the problem of the client OS sleeping and the client hence not being able to calculate the actual time for keepalive purposes. Closes #2760. Full changelog available at: https://github.com/eclipse/mosquitto/blob/v2.0.16/ChangeLog.txt plus: https://github.com/eclipse/mosquitto/blob/v2.0.17/ChangeLog.txt (2.0.17 fixes regressions from the 2.0.16 release) Signed-off-by: Karl Palsson <karlp@tweak.au>
* mosquitto: bump to 2.0.15Karl Palsson2022-09-26
| | | | | | | | | | Changelog: https://mosquitto.org/blog/2022/08/version-2-0-15-released/ Changelog: https://mosquitto.org/blog/2021/11/version-2-0-14-released/ 2.0.15 is bigger security and bugfix release. 2.0.14 had a couple of minor changes and was skipped for OpenWrt. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: add missing 'persistence' section in configPtilopsis Leucotis2022-09-26
| | | | | | | Section 'Persistence' in 'luci-app-mosquitto' is unusable without 'persistence' section in config file. Signed-off-by: Ptilopsis Leucotis <PtilopsisLeucotis@yandex.com>
* mosquitto: bump to 2.0.13Karl Palsson2021-11-09
| | | | | | | | | | Security and bugfix releases. Changelogs: https://mosquitto.org/blog/2021/10/version-2-0-13-released/ https://mosquitto.org/blog/2021/08/version-2-0-12-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: allow auth options with per listener settingsKarl Palsson2021-08-24
| | | | | | | Some settings can be either global or per listener, and we need to support both forms in UCI. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: init: support more UCI optionsKarl Palsson2021-08-24
| | | | | | | | | Recent versions of mosquitto have added a lot more fine grained control of various options. Add UCI support for all of them, and fix a couple of things that were configured as per listener, that are actually global settings. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: add respawnKarl Palsson2021-06-22
| | | | | | | | As a daemon service, respawn is expected by default, and we have that facility available via procd. Suggested-in: https://github.com/openwrt/packages/pull/15272 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: Update to 2.0.11Karl Palsson2021-06-11
| | | | | | | | | | | | This is a security and bugfix release. Full release notes: https://mosquitto.org/blog/2021/06/version-2-0-11-released/ Fixes a remotely triggered memory leak Fixes broker reconnections in certain failure situations Fixes (non-standard) qos0 queuing Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: port is optional in root configKarl Palsson2021-04-26
| | | | | | | | | From mosquitto 2.x, port became optional and deprecated in the config, and it was recommended that listeners be used instead. Drop the hard requirement in our config conversion script. Reported in: https://github.com/openwrt/packages/issues/15506 Signed-off-by: <karlp@etactica.com>
* net/mosquitto: fix log_type conversion in configKarl Palsson2021-04-26
| | | | | | As reported in: https://github.com/openwrt/packages/issues/15506 Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 2.0.10Karl Palsson2021-04-06
| | | | | | | | | | This is a security fix, affecting 2.0.0 through to 2.0.9. Mosquitto instances could be remotely DoS'd by authenticated clients. Release notes at: https://github.com/eclipse/mosquitto/blob/v2.0.10/ChangeLog.txt CVE number has not yet been assigned. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: Update to 2.0.9Karl Palsson2021-03-15
| | | | | | | | | This is a bugfix release, with minor security fixes for outgoing bridge connections and the client library. Full details here: https://mosquitto.org/blog/2021/03/version-2-0-9-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump 2.0.5 to 2.0.7Karl Palsson2021-02-08
| | | | | | | | | | | Includes: https://mosquitto.org/blog/2021/02/version-2-0-7-released/ and https://mosquitto.org/blog/2021/01/version-2-0-6-released/ Various fixes in broker and clients Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 2.0.5Karl Palsson2021-01-21
| | | | | | | | | | | Includes 2.0.5 https://mosquitto.org/blog/2021/01/version-2-0-5-released/ Includes 2.0.4 https://mosquitto.org/blog/2020/12/version-2-0-4-released/ Includes 2.0.3 https://mosquitto.org/blog/2020/12/version-2-0-3-released/ Multiple fixes to broker and client and libraries, related the 2.x changes. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 2.0.2Karl Palsson2020-12-14
| | | | | | | | | | | Full changelog: https://mosquitto.org/blog/2020/12/version-2-0-2-released/ * Enables DHE ciphers * Improved response time with http_dir and websockets Drops a patch no longer required due to upstream fixes. Signed-off-by: Karl Palsson <karlp@etactica.com>
* Mosquitto: major update to version 2.0Karl Palsson2020-12-08
| | | | | | | | | | | | | | | | | Major release, full release notes available at: https://mosquitto.org/blog/2020/12/version-2-0-0-released/ Tested on ath79, ssl full, ssl trimmed and non-ssl builds, and also all at the same time. Users may/will run into some of the changes in default authentication. Note https://mosquitto.org/documentation/migrating-to-2-0/ for tips on migrating. Patch included has already merged upstream, but didn't make the release: https://github.com/eclipse/mosquitto/pull/1930 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: Update to 1.6.12Karl Palsson2020-08-19
| | | | | | | | | | | | | | | | | | Security release. From the changelog: - In some circumstances, Mosquitto could leak memory when handling PUBLISH messages. This is limited to incoming QoS 2 messages, and is related to the combination of the broker having persistence enabled, a clean session=false client, which was connected prior to the broker restarting, then has reconnected and has now sent messages at a sufficiently high rate that the incoming queue at the broker has filled up and hence messages are being dropped. This is more likely to have an effect where max_queued_messages is a small value. This has now been fixed. Closes https://github.com/eclipse/mosquitto/issues/1793 Changelog: https://mosquitto.org/blog/2020/08/version-1-6-12-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: update to 1.6.11Karl Palsson2020-08-12
| | | | | | | | Full release notes: https://mosquitto.org/blog/2020/08/version-1-6-11-released/ Variety of generally minor bugfixes, mostly in the broker. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: bump to 1.6.10Karl Palsson2020-06-02
| | | | | | | | | Full changelog at: https://mosquitto.org/blog/2020/05/version-1-6-10-released/ Fixes openssl 3.0 support, Minor fixes, nothing standout as applicable specifically to OpenWrt. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 1.6.9Karl Palsson2020-03-02
| | | | | | | | Full changelog: https://mosquitto.org/blog/2020/02/version-1-6-9-released/ Nothing of particular relevant to OpenWrt, just general fixes. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to version 1.6.8Karl Palsson2019-12-03
| | | | | | | | | | | This is a bugfix release. Full changelog available at: https://mosquitto.org/blog/2019/11/version-1-6-8-released/ Many smaller fixes in various areas, nothing particularly standout as of special interest to OpenWrt. Signed-off-by: Karl Palsson <karlp@etactica.com>
* treewide: Use default PKG_BUILD_DIR when possibleJeffery To2019-10-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This removes lines that set PKG_BUILD_DIR when the set value is no different from the default value. Specifically, the line is removed if the assigned value is: * $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION) The default PKG_BUILD_DIR was updated[1] to incorporate BUILD_VARIANT if it is set, so now this is identical to the default value. * $(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR) if PKG_SOURCE_SUBDIR is set to $(PKG_NAME)-$(PKG_VERSION), making it the same as the previous case * $(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION) This is the same as the default PKG_BUILD_DIR when there is no BUILD_VARIANT. * $(BUILD_DIR)/[name]-$(PKG_VERSION) where [name] is a string that is identical to PKG_NAME [1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=e545fac8d968864a965edb9e50c6f90940b0a6c9 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* net/mosquitto: drop obsolete libuuid dependencyKarl Palsson2019-10-09
| | | | | | libuuid was dropped as a dependency in mosquitto 1.6.0 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: bump to 1.6.7Karl Palsson2019-09-25
| | | | | | | | | | | | | | | | | | | | Fixes compatibility with newer libwebsockets versions. Fixes performance issues with websockets Fixes potential crash on config reload Fixes CVEs: CVE-2019-11778 and CVE-2019-11779 Various MQTTv5 fixes. Skips releases with critical regressions Changelog for 1.6.7: https://mosquitto.org/blog/2019/09/version-1-6-7-released/ Changelog for 1.6.5: https://mosquitto.org/blog/2019/09/version-1-6-5-released/ Changelog for 1.6.6: https://mosquitto.org/blog/2019/09/version-1-6-6-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: bump to 1.6.4Karl Palsson2019-08-12
| | | | | | | | | Full changelog here: https://mosquitto.org/blog/2019/08/version-1-6-4-released/ Fixes a regression in persistent session handling, and various other regressions related to the mqtt5 support. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: update to 1.6.3Karl Palsson2019-06-19
| | | | | | | | | | | | | | Fixes multiple issues, primarily of interest to OpenWrt: * getrandom issues with and without TLS and glibc See https://github.com/openwrt/packages/issues/9005 and https://github.com/openwrt/packages/pull/9243 Many many many other fixes related to mqttv5/v3.1.1 interactions and mqtt5 support options. Full changelog at: https://mosquitto.org/blog/2019/06/version-1-6-3-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: major upgrade to 1.6.xKarl Palsson2019-05-15
| | | | | | | | | | | | | | | | | | | | | | | | | | Major new release of mosquitto. This release rolls up the initial 1.6.0 release, plus the subsequent build/bug fixes of 1.6.1 and 1.6.2. Original upstream changelogs: https://mosquitto.org/blog/2019/04/version-1-6-released/ https://mosquitto.org/blog/2019/04/version-1-6-1-released/ https://mosquitto.org/blog/2019/04/version-1-6-2-released/ Major features of interest: * MQTTv5 support * performance improvements * ALPN support * OCSP staping support * OpenSSL Engine support * TLSv1.0 support dropped Currently adds two patches to continue supporting OpenSSL engine support being disabled, and a missing header include. These are both tracked upstream and are expected to be dropped in a subsequent release. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: correct config file option nameKarl Palsson2019-04-11
| | | | | | | | | Correct option is "password_file" not "passwd_file" Originally reported as: https://github.com/openwrt/packages/pull/8642 Added the package bump. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to v1.5.8Karl Palsson2019-03-27
| | | | | | | | | | | Full changelog available at: https://github.com/eclipse/mosquitto/blob/v1.5.8/ChangeLog.txt This is a bugfix release. Of likely note to OpenWrt is a bug affecting missing messages on bridges since 1.5.4: https://github.com/eclipse/mosquitto/issues/1174 Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: update to 1.5.7Karl Palsson2019-02-14
| | | | | | | | | | | | This is a minor bugfix release. Full changelog available at: https://mosquitto.org/blog/2019/02/version-1-5-7-released/ Most relevant to OpenWrt are probably: * fixing persistent store bloat * fix sorting of included config files * fix errors related to per_listener_settings Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 1.5.6Karl Palsson2019-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a bugfix and security release. CVE-2018-12551: If Mosquitto is configured to use a password file for authentication, any malformed data in the password file will be treated as valid. This typically means that the malformed data becomes a username and no password. If this occurs, clients can circumvent authentication and get access to the broker by using the malformed username. In particular, a blank line will be treated as a valid empty username. Other security measures are unaffected. => Users who have only used the mosquitto_passwd utility to create and modify their password files are unaffected by this vulnerability. CVE-2018-12550: If an ACL file is empty, or has only blank lines or comments, then mosquitto treats the ACL file as not being defined, which means that no topic access is denied. Although denying access to all topics is not a useful configuration, this behaviour is unexpected and could lead to access being incorrectly granted in some circumstances. CVE-2018-12546. If a client publishes a retained message to a topic that they have access to, and then their access to that topic is revoked, the retained message will still be delivered to future subscribers. This behaviour may be undesirable in some applications, so a configuration option `check_retain_source` has been introduced to enforce checking of the retained message source on publish. Plus the following bugfixes: * wills not sent to websocket clients * spaces now allowed in bridge usernames * durable clients not receiving offline messages with per_listener_settings==true * compilation with openssl without deprecated apis * TLS working over SOCKS * better comment handling in config files Full changelog available at: https://github.com/eclipse/mosquitto/blob/fixes/ChangeLog.txt#L1 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: bump to 1.5.5Karl Palsson2018-12-18
| | | | | | Security and bug fix. Full changelog available at: https://mosquitto.org/ChangeLog.txt Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: support more acl plugin optionsKarl Palsson2018-11-28
| | | | | | | | | | | | Adds support for acl_plugin, and acl_opt_* options. acl_opt_* requires some care as it relies on the internal behaviour of cfg_load setting environment variables in a certain form. However, given that _all_ of the cfg_load infrastructure relies on that, we can be pretty sure that it won't change in a way that will hurt us. Originally reported as: https://github.com/openwrt/packages/pull/7434 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: install headers for auth plugin developmentDirk Feytons2018-11-12
| | | | Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
* net/mosquitto: bump to 1.5.4Karl Palsson2018-11-09
| | | | | | | | | | | | | | Security and bugfix release. Full release notes available at: https://mosquitto.org/blog/2018/11/version-154-released/ Security: * client certificates not validated for websockets listeners. Bugfixes: * wills with disconnected clients better handled * bridge restart_timeout properly observed Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: add CPE_IDKarl Palsson2018-10-18
| | | | Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 1.5.3Karl Palsson2018-09-26
| | | | | | | | | | | | | | | | | | | | | | Full changelog at https://github.com/eclipse/mosquitto/blob/v1.5.3/ChangeLog.txt Primary change: CVE fix for CVE-2018-12543 - prevent crash on topics that begin with $ but are not $SYS Selected other fixes relevant to OpenWrt since 1.5.1: - Fix retained messages not sent by bridges on outgoing topics at the first connection. Closes #701. - Fix duplicate clients being added to by_id hash before the old client was removed. Closes #645. - Fix excessive CPU usage when the number of sockets exceeds the system limit. Closes #948. - Fix for bridge connections when using WITH_ADNS=yes. - Fix round_robin false behaviour. Closes #481. - Fix segfault on HUP when bridges and security options are configured. Closes #965. Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: install pkg-config filesMichael Heimpold2018-09-04
| | | | | | | | | | | | | Install the .pc files to staging directory to help other packages to find the libraries. Since the build does not use CMake, we need to manually install the files and replace two variables using sed. Filed upstream as https://github.com/eclipse/mosquitto/pull/950 Signed-off-by: Michael Heimpold <michael.heimpold@i2se.com> Tested-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: update to 1.5.1Karl Palsson2018-08-20
| | | | | | | | | | | | | | | Bugfix release. Full changelog at: https://mosquitto.org/blog/2018/08/version-151-released/ Of most interest to OpenWrt: * Remove use of AI_ADDRCONFIG, which means the broker can be used on systems where only the loopback interface is defined. * Fix IPv6 addresses not being able to be used as bridge addresses. * Fix problem opening listeners on Pi caused by unsigned char being default. * Fix segfault on startup if bridge CA certificates could not be read. * Fix possible endian issue when reading the memory_limit option. * library and client bugfixes including: https://github.com/openwrt/packages/issues/6765 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: support all the extra options from newest versionKarl Palsson2018-05-07
| | | | | | Import the config conversion script from https://github.com/remakeelectric/owrt_pub_feeds/tree/master/net/mosquitto-next Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to major 1.5 releaseKarl Palsson2018-05-07
| | | | | | | | | | | This is a major release. https://mosquitto.org/blog/2018/05/version-1-5-released/ Performance, configurability, protection from fuzzing and bad data, customizable SSL contexts, all sorts of goodies. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: bump to 1.4.15 for CVE fixesKarl Palsson2018-03-01
| | | | | | | | | | See https://mosquitto.org/blog/2018/02/security-advisory-cve-2017-7651-cve-2017-7652/ for full details. patch for reproducible builds had to be rebuilt based on upstream change. Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: auto-disable TLS-PSK support if not availableKarl Palsson2018-02-19
| | | | | | | | OpenSSL grew the ability to turn off TLS-PSK support. Make sure that mosquitto turns on/off TLS-PSK support based on this OpenSSL config. Fixes https://github.com/openwrt/packages/issues/5633 Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: reproducible build patchesKarl Palsson2017-12-11
| | | | | | | Remove build timestamp. Using currently proposed upstream patch. Signed-off-by: Alexander Couzens <lynxis@fe80.eu> Signed-off-by: Karl Palsson <karlp@etactica.com>
* net/mosquitto: depend on virtual package instead of selectKarl Palsson2017-12-11
| | | | | | | | | Can't use DEPENDS:= +libname when libname is now a virtual package. Switch to plain DEPENDS:= libname. Fixes Github issue 4751 Signed-off-by: Karl Palsson <karlp@etactica.com>
* mosquitto: properly use localhost instead of ipv4Karl Palsson2017-08-16
| | | | | | | On some environments, connecting to localhost was resolving to ::1, which didn't match the bind to the explicit 127.0.0.1. Signed-off-by: Karl Palsson <karlp@etactica.com>
Powered by cgit, Themed by Ted Yin.