Commit Graph

354 Commits

Author SHA1 Message Date
iliajie
486b323990 Add ability to control Server: response header #1945
This change:

  1. Adds ability for an admin to set custom response header for `Server:`
  2. Fixes displaying of running Webmin version for unauthenticated user
2023-07-11 15:05:04 +03:00
Jamie Cameron
e552c68f7e SSL need to be shut down properly 2023-06-13 07:41:09 -07:00
Jamie Cameron
ada885ef41 Update session DB with actual remote IP https://github.com/webmin/authentic-theme/issues/1653 2023-05-25 16:50:15 -07:00
Jamie Cameron
3996ff205f Handle case where the root user for testing PAM has no password https://github.com/webmin/webmin/issues/1911 2023-05-20 16:26:54 -07:00
iliajie
cdf715ad2e Fix to test expired password correctly 2023-05-04 13:09:16 +03:00
Jamie Cameron
81a8607628 Use lc to lower case 2023-04-28 13:59:19 -07:00
iliajie
5dc2281e66 Fix password change screen pop up on every login 20d07a17a8 2023-04-28 11:02:19 +03:00
Jamie Cameron
9bcee57c7c Try lower case username if upper case doesn't exist https://github.com/virtualmin/virtualmin-gpl/issues/553 2023-04-25 20:47:07 -07:00
Jamie Cameron
20d07a17a8 Sync password expiry logic with Linux https://forum.virtualmin.com/t/personalized-warning-in-password-policy/120228 2023-04-18 21:43:15 -07:00
Jamie Cameron
22e7e5c553 Deal with backquotes 2023-01-24 20:55:31 -08:00
Jamie Cameron
726d28d807 Verify long-running websockets sessions in miniserv 2022-12-14 11:18:28 -08:00
iliajie
a9349c7fe5 Add new LIBROOT env var 2022-12-05 19:03:10 +02:00
iliajie
f1a434b65a Fix to always set vendor_perl if perllib config option is set
https://sourceforge.net/p/webadmin/bugs/5595/
2022-12-02 00:22:43 +02:00
iliajie
2f21d0b067 Fix to call setup_ssl_contexts conditionally 2022-12-01 14:42:20 +02:00
iliajie
e72415952c Fix to check if Net::SSLeay::get_servername exists (on CentOS 6)
https://github.com/webmin/webmin/issues/1798#issuecomment-1328295876
2022-11-27 19:19:15 +02:00
Jamie Cameron
e3792a48e0 Check for timeouts at more places when reading headers https://github.com/webmin/webmin/issues/1767 2022-11-02 23:21:59 -07:00
iliajie
c8e94c8cdc Fix to use Digest::SHA instead 2022-10-30 21:49:52 +02:00
Jamie Cameron
6d96dd6a13 Add option to use existing websockets key instead of session ID 2022-10-30 12:21:34 -07:00
Jamie Cameron
c23c334eed Connection: header may be more than just upgrade 2022-10-26 09:47:27 -07:00
Jamie Cameron
98c2ce24c1 Include the session ID in the websockets key so that it can be verified on the backend to prevent misuse of the session 2022-10-22 18:17:15 -07:00
Jamie Cameron
b049ba6c3b Add more debug info 2022-10-22 12:13:27 -07:00
Jamie Cameron
d7c34eab2b Limit a connection to a user 2022-10-20 22:22:45 -07:00
Jamie Cameron
a87f3fbf89 No need for forked command mode for now 2022-10-20 21:41:14 -07:00
Jamie Cameron
6546ad5e4a Merge branch 'master' of github.com:webmin/webmin 2022-10-17 11:26:46 -07:00
Jamie Cameron
8919aafc19 Use correct cert and key file when there is a hostname-specific cert 2022-10-17 11:26:20 -07:00
iliajie
d3fe07cecc Fix typo 2022-10-17 17:36:13 +03:00
Jamie Cameron
0895b4724f Pass SSL cert and key files for this connection on to CGI scripts 2022-10-16 17:20:58 -07:00
Jamie Cameron
f00a322d94 Actually forward the websockets protocol properly in proxy mode 2022-10-15 16:27:27 -07:00
Jamie Cameron
340b883f92 Don't lose debug log on reload 2022-10-14 23:35:24 -07:00
Jamie Cameron
2fad122571 Delete obsolete inets support 2022-10-14 16:22:30 -07:00
Jamie Cameron
5507f501df Log SSL redirects 2022-10-14 15:30:05 -07:00
Jamie Cameron
273100ec6e Add support for websockets proxying via Webmin 2022-10-14 12:31:32 -07:00
Jamie Cameron
fa465d0f76 Start of work on websockets proxy support 2022-10-02 21:23:31 -07:00
Jamie Cameron
15f9f8f206 Re-read SSL certs on USR1 signal 2022-09-17 17:47:16 -07:00
Jamie Cameron
b45d55ac1b Further caching of SSL contexts 2022-09-17 17:32:28 -07:00
Jamie Cameron
339ec2178a Merge branch 'master' of github.com:webmin/webmin 2022-09-17 16:31:37 -07:00
Jamie Cameron
7cb916d64d Clear out contexts hash on reload 2022-09-17 16:31:32 -07:00
iliajie
3747f930b0 Fix wording 2022-09-17 21:53:15 +03:00
iliajie
5e521515d9 Fix to use correct URL name ; consider musthost option 2022-09-17 21:46:57 +03:00
iliajie
26138b82f5 Enforce SSL with HSTS header (optional) 2022-09-13 01:09:53 +03:00
Jamie Cameron
310b639015 Factor out SSL cert setup function 2022-09-10 20:35:14 -07:00
iliajie
de0d57a13d Fix to allow no port with custom redirect host 2022-08-21 14:49:05 +03:00
Jamie Cameron
ce5555d58d Remove option to do an HTTP redirect, as it's better done in JS 2022-08-17 00:10:20 -07:00
Jamie Cameron
4046923ec8 Drop hide_admin_url config option, as it's being obsoleted by JS-based redirects 2022-08-17 00:05:44 -07:00
iliajie
befca9dc6b Revert "Merge branch 'master' of github.com:webmin/webmin"
This reverts commit 81d7399 in favor of an upcoming PR
2022-08-14 00:41:59 +03:00
iliajie
dea053cde2 Fix to redirect without message or show it if JavaScript is disabled 2022-08-13 21:48:30 +03:00
Jamie Cameron
6bb89a84fc Redirect to https with Javascript 2022-08-13 09:34:03 -07:00
iliajie
7265005c53 Fix miniserv message sent on reloads 2022-08-02 13:34:12 +03:00
Jamie Cameron
0872ecbfcf Log something on shutdown 2022-07-02 15:04:29 -07:00
luz paz
3e6142f098 Fix user and non-user facing typos 2022-06-29 07:17:11 -04:00