Commit graph

74 commits

Author SHA1 Message Date
Roger Light
d6c1c381f2 Allow get password to work in Windows tests 2026-05-03 01:17:26 +01:00
Roger A. Light
7de6cb42ef Compiler warning fixes 2026-01-23 08:44:34 +00:00
Roger A. Light
7ea73f6d60 Formatting: Forbid single line if statements
These hide cases from coverage checks
2025-09-17 12:48:02 +01:00
Roger A. Light
9d95bf24c3 Formatting: Indent fixes 2025-09-17 12:03:06 +01:00
Roger A. Light
67ad22df0a Formatting: Double space before functions. 2025-09-17 12:03:03 +01:00
Roger A. Light
8bdb6c69ef Fix Coverity Scan #1592961. 2025-08-22 12:44:05 +01:00
Roger A. Light
15c5dafb5b Fix oss-fuzz flaky issue
Caused by password file with many duplicate usernames, unlikely to occur
in practice
2025-08-22 11:09:39 +01:00
Roger A. Light
6967e5b890 Update for previous commit
Update functionality, man page, changelog, and add test.
2025-08-07 23:35:12 +01:00
trysten
5a79f23510 add stdout option to mosquitto_passwd
parse a dash '-' to output a password to stdout when using -c 'create
new password file'
2025-08-07 23:10:06 +01:00
Steve Hamann
ff0afc8374 Implement migration script to migrate from ACL file to DynSec
Signed-off-by: Steve Hamann <steve.hamann@cedalo.com>
2025-07-10 00:46:17 +01:00
Roger A. Light
3511db6889 Whitespace tidy
Some checks failed
CodeQL / Analyze (cpp) (push) Has been cancelled
CodeQL / Analyze (python) (push) Has been cancelled
Coverage / coverage (push) Has been cancelled
Mosquitto - CMake / build (push) Has been cancelled
Mosquitto - Make ASAN / build (push) Has been cancelled
Mosquitto - Make / build (push) Has been cancelled
Windows build / mosquitto (push) Has been cancelled
2025-04-06 22:40:48 +01:00
Roger A. Light
ae860b965f Fix passwd test
Some checks failed
CodeQL / Analyze (cpp) (push) Has been cancelled
CodeQL / Analyze (python) (push) Has been cancelled
Coverage / coverage (push) Has been cancelled
Mosquitto - CMake / build (push) Has been cancelled
Mosquitto - Make ASAN / build (push) Has been cancelled
Mosquitto - Make / build (push) Has been cancelled
Windows build / mosquitto (push) Has been cancelled
2025-03-26 20:54:21 +00:00
Roger A. Light
b5e21d146d Move password functions to libcommon. 2024-06-12 21:26:25 +01:00
Roger A. Light
f7ebe692c0 mosquitto_ctrl minor fixes 2024-03-27 10:54:37 +00:00
Roger A. Light
4498193331 Refactor file functions to common static library. 2024-03-17 23:13:11 +00:00
Roger A. Light
16d465fa49 Refactor base64 functions to common static library. 2024-03-17 21:34:27 +00:00
Roger A. Light
b5c25cf1d0 Refactor memory functions to common static library. 2024-03-17 10:30:07 +00:00
Roger A. Light
6eb56dc6f1 Refactor UTF-8 code to common static library. 2024-03-17 07:45:58 +00:00
Roger A. Light
9f7b23ca72 Fix oss-fuzz 67175, 67180, 67191
Embedded 0 characters in a file would prevent the loading of that file.

This could not happen apart from corruption of the file, or by
deliberate manipulation by the admin. Minimal impact.
2024-03-04 14:24:55 +00:00
Roger A. Light
1882bdd95b mosquitto_passwd: Don't exit on signal for oss-fuzz 2024-03-03 08:00:24 +00:00
Roger A. Light
8ccef0713b Test improvements, remove redundant code 2024-02-26 18:25:31 +00:00
Roger A. Light
837c272c29 Add argon2 password hash support 2023-11-20 22:58:42 +00:00
Roger A. Light
b6710f9364 Refactor password code 2023-11-20 22:58:42 +00:00
Roger A. Light
c8e313aac0 Fix build
This is for the case where command line overrides are set.
2023-09-19 22:48:24 +01:00
Roger A. Light
e656e694ed Merge branch 'master' into develop 2023-09-09 15:20:40 +01:00
Roger A. Light
47ae6dd0e2 Fix mosquitto_passwd -U backup file creation.
Closes #2873.
2023-08-22 08:09:36 +01:00
Roger A. Light
44b94875b5 mosquitto_passwd uses mkstemp() for backup files. 2023-08-16 14:01:21 +01:00
Roger A. Light
4ca294fd9c Warn on lax permissions on sensitive files.
- Broker will log warnings if sensitive files are world readable/writable, or
  if the owner/group is not the same as the user/group the broker is running
  as. In future versions the broker will refuse to open these files.
2023-08-16 14:01:21 +01:00
Roger A. Light
a31bee722f Simplify make build. 2023-05-10 16:20:06 +01:00
Roger A. Light
44415cb974 Fix passwd fuzz build 2023-03-11 00:10:56 +00:00
Roger A. Light
77b5dfb770 Fuzzing: Basic mosquitto_passwd target 2023-03-03 21:42:11 +00:00
Roger A. Light
c0b7f54ac1 Fuzzing: db_dump file loading 2023-02-04 23:55:15 +00:00
Roger A. Light
5fb4b05d8f Support for initial fuzzing through oss-fuzz 2023-01-31 13:54:21 +00:00
Roger A. Light
b49631df23 Add mosquitto_passwd tests 2022-11-30 13:46:35 +00:00
Kai Buschulte
8b67883548 Remove old compatibility header support
Signed-off-by: Kai Buschulte <kai.buschulte@cedalo.com>
2022-08-08 09:25:16 +00:00
Kai Buschulte
71456077ad Introduce a common-options cmake target
this makes it possible to explicitly share compile options, without
using the `add_definition` function. This function declares options for
the current directory and below (in our case also for `deps`).

Adding -Wall, -Wconversion and -Wextra to at least make compiler
warnings visible for the cmake build.

Signed-off-by: Kai Buschulte <kai.buschulte@cedalo.com>
2022-07-04 11:16:01 +02:00
Kai Buschulte
36935a3384 Use OpenSSL:SSL cmake target
Instead of using the CMAKE_OPENSSL_INCLUDE and CMAKE_OPENSSL_LIBRARY
variables the imported target OpenSSL::SSL is used.
This is a more modern way of target linking.

Signed-off-by: Kai Buschulte <kai.buschulte@cedalo.com>
2022-06-22 23:56:09 +01:00
Roger A. Light
e3246f547c Print messages in mosquitto_passwd when adding/updating passwords.
Closes #2544. Thanks to Shruti Nanda.
2022-05-25 17:15:04 +01:00
Norbert Heusser
d4216c8cb6 Fixed CMakeLists.txt
* Addded missing files plugin_subscribe and plugin_unsubscribe to src/CMakeLists.txt
* Aligned mixed usage of all-keyword and all-plain in target_link_libra…ry definition in in CMakeLists.txt

Signed-off-by: Norbert Heusser <norbert.heusser@cedalo.com>
2022-04-06 10:26:03 +00:00
Roger A. Light
ffb7661d86 Move shared code to common directory
This is currently limited to "utility" type functions and does not include code common to the library and broker that are protocol related.
2022-02-09 16:26:10 +00:00
Roger A. Light
5a3b42d4a4 Use path vars in Makefiles. 2022-02-09 14:44:09 +00:00
Roger Light
cd07f1136b Bump copyrights. 2021-11-03 22:10:06 +00:00
Roger A. Light
8ac11929cc Merge branch 'master' into develop 2021-10-27 17:19:33 +01:00
Roger A. Light
799cdead15 Experimental custom websockets support. 2021-10-06 15:32:45 +01:00
Roger A. Light
a1a190b482 Pointless whitespace tidy. 2021-10-05 15:20:37 +01:00
Roger A. Light
aa29b45e70 Merge branch 'master' into develop 2021-09-07 19:17:11 +01:00
Roger Light
33349010cd Fix linker error 2021-08-22 07:55:10 +01:00
Roger Light
342aa0ad1a Fix installation using WITH_TLS=no.
Closes #2281. Thanks to Matt Turner.
2021-08-20 23:49:59 +01:00
Roger A. Light
182384440b Password salts are now 64 bytes long. 2021-07-28 12:01:47 +01:00
Roger A. Light
0cdaac0227 Remove unused macro. 2021-07-28 10:12:56 +01:00