Joshua Tauberer 5f14eca67f merge v0.25 security release

2017-11-15 11:27:30 -05:00

..

templates

document the "local" alias pointing to this box in Custom DNS (#1261)

2017-10-20 17:20:21 -04:00

auth.py

the control panel auth hmac message should also include the user's password so that resetting a password in the database forces that user to log in to the control panel again; also use a sha256 hmac

2015-06-06 12:38:19 +00:00

backup.py

Backup script should now stop php7.0-fpm instead of php5-fpm (#1206)

2017-07-17 09:45:40 -04:00

csr_country_codes.tsv

drop the CSR_COUNTRY setting and ask within the control panel

2015-12-26 11:48:23 -05:00

daemon.py

simplify how munin-cgi-graph is called to reduce the attack surface area

2016-08-19 12:42:43 -04:00

daily_tasks.sh

nightly TLS certificate provisioning should omit warnings about domains it cant provision for

2016-12-07 07:02:52 -05:00

dns_update.py

merge v0.25 security release

2017-11-15 11:27:30 -05:00

email_administrator.py

use "127.0.0.1" throughout rather than mixing use of an IP address and "localhost"

2016-05-06 09:10:38 -04:00

mail_log.py

Added an alternative mail log scanning script for use from the command line (and monitoring, at a later stage)

2017-03-26 09:13:35 -04:00

mailconfig.py

[Issue #1159] Remove any +tag name in email alias before checking privileges (#1181)

2017-07-21 11:10:16 -04:00

ssl_certificates.py

letencrypt now supports idna, remove the check/block

2017-04-17 07:45:08 -04:00

status_checks.py

web_domains should also normalize ipv6 addresses (#1201)

2017-07-13 07:16:12 -04:00

utils.py

move the custom exclusive process code from utils.py into a new python package named exclusiveprocess

2017-01-15 11:02:23 -05:00

web_update.py

update nginx cipher list to Mozilla's current intermediate ciphers and update HSTS header to be six months

2017-10-03 11:47:32 -04:00