Configure the demo servers to use untrusted
tls certs so that they communicate with each other.

This configuration makes them very unsafe so I've added warnings about
it in the readme.

Don't send renewal emails to deactivated users (second attempt)

Use python3 in the demo

Don't log exception when failing to fetch remote content.

Fix Prometheus erroring after the extremities monitoring

* py3 fixes for federation_client
* .well-known support for federation_client

This code confused the hell out of me today. Split _get_new_device_messages
into its two (unrelated) parts.

* remove 2.7 from CI and publishing

* fill out classifiers and also make it not be installed on 3.5

* some minor bumps so that the old deps work on python 3.5

Change password reset links to /_matrix.

Add FAQ questions to federate.md. Add a health warning making it clear that the 1711 upgrade FAQ is now out of date.

Moves the warning about password resets being disabled to the point where a user actually tries to reset their password. Is this an appropriate place for it to happen?

Also removed the disabling of msisdn password resets when you don't have an email config, as that just doesn't make sense.

Also change the error a user receives upon disabled passwords to specify that only email-based password reset is disabled.

* add monthly active users to phonehome stats

Fix bug sending federation transactions with lots of EDUs

Share an SSL context object between SSL connections

Co-Authored-By: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>

If we try and send a transaction with lots of EDUs and we run out of
space, we call get_new_device_msgs_for_remote with a limit of 0, which
then failed.

Add some tests for bad certificates for federation and .well-known connections

turns out we need a shiny version of service_identity to enforce this
correctly.