Prosody 0.9.7 released
We are pleased to announce a new minor release from our stable branch. This release has just a couple of changes for you: Fix server-to-server interoperability issue with Isode M-Link (since 0.9.6) Fix traceback in ‘prosodyctl about’ command with LuaRocks 2.2.0+ installed Also, this is our first release with an official Docker image. More on that soon! Download As usual, download instructions for many platforms can be found on our download page
Read more →Prosody 0.9.6 released
Another minor release for you all. The most important change here is to disable SSLv3 by default, now it has been shown to be insecure when used by clients. This means that clients that support only SSLv3 will no longer be able to connect by default (which is why we had not been planning to make this change in a minor release). A summary of changes in this release:
Read more →Prosody 0.9.4 released
We’re pleased to present Prosody 0.9.4, the latest release from our stable 0.9 branch. This release fixes a security (denial of service) issue. If you are using mod_compression then we strongly recommended that you upgrade as soon as possible or disable compression (it is disabled by default) to prevent potential resource consumption by untrusted users. A summary of changes in this release: Compression: Disallow compression on unauthenticated streams Core: Limit default read size and maximum stanza size Core: Enable SASL EXTERNAL by default for component s2s S2S: Warn if s2s_secure_auth and s2s_require_encryption have been set in conflicting ways S2S: Warn if no local network addresses were found, preventing successful s2s MUC: Fix traceback when a non-occupant tried to change an occupant’s role MUC: API: Fire an event when temporary rooms are destroyed after the last person leaves Telnet: Fixed traceback when listing users Telnet: Apply normalization to JIDs in user management commands HTTP: Fix directory detection in file server on Windows Plugins: Fix paths on Windows MOTD: Don’t strip blank lines from the message provided in the config prosodyctl: Better error reporting when generating certificates Makefile: Improve FreeBSD compatibility Multiple fixes to our migration tools, and support for importing MUCs from ejabberd Download Download instructions for all platforms can be found on our download page
Read more →Prosody 0.9.2 released
We are pleased to announce Prosody 0.9.2, the latest release of our stable 0.9 branch. The main focus of this release is on a couple of security improvements. A summary of changes in this release: Debian/Ubuntu packages fixed to always generate per-system certs (see below) TLS: Improved cipher string, and use Prosody’s preferred ciphers (see below) MUC: Fix for Spark clients not displaying room lists Packaged certificates It has always been our policy that Prosody should be secure out of the box, which is why we generate self-signed certificates for “localhost” at installation time, making it easy to get a simple XMPP server up and running in a couple of minutes.
Read more →Prosody 0.9.1 released
It’s been a great couple of weeks since Prosody 0.9.0 was released, but we’ve fixed a small number of issues and are happy to present our 0.9.1 release. A summary of changes in this release: Config: Fix the workaround for LuaSec 0.4.x to apply the ssl ‘ciphers’ option correctly Config: Ability to specify the ssl ‘dhparam’ option simply as a path to a file, instead of a callback function Windows: Fix s2s issues Windows: Fix the ability to specify absolute paths to SSL certificates in the config Build: Fix compilation issue on non-Linux systems that have glibc (such as Debian GNU/kFreeBSD) API: Fix to our set library, that caused the :include() and :exclude() methods to behave incorrectly Download instructions for many platforms can be found on our download page
Read more →Prosody 0.9.0 released
Yes! Prosody 0.9.0 is here! Over 1500 commits have been made by twelve people since 0.8, and even more have gone into third-party libraries that we have been contributing to such as LuaSocket, LuaSec and LuaEvent. IPv6 Our first big feature to announce is IPv6 support throughout. After releasing 0.8, this was by far our most voted-for issue in our tracker. Many thanks especially go to Florian Zeitz who worked on the bulk of IPv6 support in both Prosody and LuaSocket.
Read more →Prosody 0.9.0rc4 available for testing
We decided there wasn’t enough suspense about the 0.9.0 release yet, so we’ve decided to issue another release candidate to keep you on your toes. In fact, some of the changes we made for rc3 to keep compatible with the new LuaSocket 3.0 didn’t compile on some platforms. This should now be fixed. We also realised that although we have set a number of new defaults for our TLS configuration (see previous release notes), we had not set a list of acceptable ciphers, which led some clients and servers to negotiate ciphers that might be considered weak.
Read more →Prosody 0.9.0rc3 available for testing
After everyone’s wonderful help at finding bugs (cheer), we’ve another release candidate for you from our 0.9 branch. The primary reason for this RC is to keep compatibility with the just-released LuaSocket 3.0rc1. The new LuaSocket is now available from our package repository, and we have updated our IPv6 documentation accordingly. If you have previously installed lua-socket-prosody, it is now recommended to install the lua-socket package instead. Summary of changes made since rc2:
Read more →Prosody 0.9.0rc2 available for testing
After a very successful beta, we decided it’s time for a release candidate. We have made only a few small changes since beta1: With s2s_secure_auth enabled, we required encryption for domains listed in s2s_insecure_domains, even if s2s_require_encryption was not set. Some minor fixes to commands in the telnet console. Automatically disable SSL compression if luasec-prosody is installed. Fix a traceback in mod_bosh when used in combination with some plugins.
Read more →Prosody 0.9.0beta1 available for testing
It’s the news you’ve all been waiting for! We present the first beta of our upcoming 0.9.0 release. For those of you not already following our development and nightly builds, here are a few of the major changes in this development branch (codenamed ‘Prosody Everyone Edition’) since 0.8: Full IPv6 support for all services (c2s, s2s, HTTP, etc.) Server-to-server authentication using certificates (SASL EXTERNAL) A new and improved HTTP subsystem, supporting virtual hosts and fully-reloadable modules Basic pubsub service Many other fixes and improvements, see our release notes for more information.
Read more →About
Prosody is a lightweight and flexible XMPP server designed with ease-of-use and extensibility in mind.