4d105afcf2
Update comments (duplicate words, blah)
...
@skipci
2019-08-10 13:29:14 +02:00
a185e341e6
Update client_accepts_tag() to use the mtags API rather than
...
hardcoded if() statements.
2019-08-10 13:21:04 +02:00
bcf21c9d7e
Add fix for "bug" caught by fuzzer (incorrect @time in S2S traffic).
2019-08-07 17:33:11 +02:00
2c8f909759
Ported a major chunk of m_forward's functionality to chanmodes/link, with a bunch of improvements =]
2019-07-27 21:10:13 +02:00
af2ef7d186
Updated cmdrestrict example configuration to reflect recent changes
2019-07-27 14:02:15 +02:00
3a1ae06345
cmdrestrict should be able to override any command, also couple of minor improvements
2019-07-27 13:56:30 +02:00
8c11ebd0e7
Make allow {} block always continue when there were no password or wrong password was specified.
2019-07-18 18:47:05 +03:00
c9908a55c9
Added HOOKTYPE_CONFIGPOSTTEST for webredir module, to check if there is no set::webredir.
2019-07-16 01:18:41 +03:00
e30de7b7a6
Removed default url for webredir module and refuse to load without url.
2019-07-15 21:59:41 +03:00
1079cded02
Nested comment blocks don't work anymore :D
2019-07-15 18:36:15 +02:00
19aad17d4e
cfgstruct is not necessary for cmdrestrict :D
2019-07-14 23:08:42 +02:00
655027f5db
Merge branch 'unreal50' of github.com:syzop/unrealircd-next into unreal50
2019-07-14 23:05:08 +02:00
e5cfc5d798
cmdrestrict v1.0: Restrict specific commands until certain conditions have been met =]
2019-07-14 23:04:15 +02:00
53146f252c
New module webredir (do 301 redirect for HEAD/GET/POST/PUT commands to the specified URL).
2019-07-14 22:37:55 +03:00
2894c16638
Lower set::ident::read-timeout to 7 seconds, which should be plenty
...
on the Internet of today.
2019-07-14 19:22:36 +02:00
1c5c501dc1
Remove m_nopost module as it is no longer useful.
...
UnrealIRCd already protects (for maaaany years) with ping cookies against
this attack. Making the m_nopost redundant.
Also, another module may be more useful (more on this soon...).
2019-07-14 19:07:32 +02:00
d22a2a20f0
Make usermode +T block channel CTCP's as well.
2019-07-14 19:01:31 +03:00
d9bd18c483
Remove TODO comment, now that it has been done [skip ci]
2019-07-13 16:00:49 +02:00
c2445fa9c6
Add history_backend_null, which can be useful on servers where you
...
explicitly do not want to remember any channel history, such as on
a hub server to save memory.
Also, on Windows, ensure to compile all history_backend_*.c
2019-07-13 15:53:23 +02:00
3b67e83275
Add some FIXME's to labeled-response. Not going to work on that right now,
...
since there is more important things to do...
[skip ci]
2019-07-13 15:40:58 +02:00
806256e9c2
Move generate_batch_id() to core. Use chathistory BATCH type, if supported.
2019-07-13 15:25:56 +02:00
ccfeac6eae
Don't re-order mtags on history playback
...
Strictly, this is not a problem, but.. for our test framework it is better
and it looks cleaner too.
2019-07-13 08:20:12 +02:00
65b5e21464
Fix double 'time' mtag on history playback
2019-07-13 08:18:53 +02:00
0cda60301d
Add set::broadcast-channel-messages [auto|always|never]:
...
This determines when UnrealIRCd will use broadcast instead of multicast
for delivering channel messages to servers.
The default is 'auto' which uses multicast but switches to broadcast
when channel mode +H is set. This is what people should normally use.
If you set it to 'never' then +H will not work properly if there are
servers with 0 users on them.
2019-07-13 07:59:12 +02:00
006b7e5a7c
Hide serveropts from normal users.
2019-07-12 01:09:33 +03:00
ca094f0a75
New set::ping-warning option (how fast the server should reply to PING before sending a warning to opers).
2019-07-11 16:47:02 +03:00
876758b73e
Fix Custom OpenSSL binary path was ignored.
2019-07-11 14:20:01 +03:00
a601f565e1
Do not override all libs.
2019-07-11 03:06:28 +03:00
57f6718086
Update configure script for previous commit.
2019-07-11 02:36:51 +03:00
4feba3edd5
Check whether linking with OpenSSL functions requires -ldl or -lpthread or both
2019-07-11 02:33:11 +03:00
dbbcc6918a
Fix Custom OpenSSL library path was ignored
2019-07-11 00:53:41 +03:00
60ebc1375e
Support channel status prefixes for SAJOIN.
2019-07-10 17:42:46 +03:00
769955eab5
Require at least one SSL/TLS port to be open. In other words, change
...
https://www.unrealircd.org/docs/FAQ#Your_server_is_not_listening_on_any_SSL_ports
from a warning to an error.
2019-07-10 06:53:01 +02:00
3cff80ad8d
Use SSL_CTX_set_min_proto_version() in a more inteligent way.
...
It shouldn't matter now, but if OpenSSL some day deprecates the old
way then at least it won't have silent disastrous effects.
2019-07-09 20:24:00 +02:00
dc2c2c3f89
Re-indent ssl.c
2019-07-09 20:13:02 +02:00
d09b9d53a4
Make SSL/TLS mandatory for UnrealIRCd to run. Previously you could get
...
around this by simply having no certs etc. I doubt anyone used it and
that was not a recommended configuration.
(More to come)
2019-07-09 20:06:11 +02:00
657985bf53
Make Debian 10 compile with -Werror. Add -Wno-cast-function-type
2019-07-07 18:17:32 +02:00
efe73de70d
-Wno-unused-but-set-parameter
...
[skip ci]
2019-07-07 18:11:54 +02:00
79bd78c0f3
Make it so UnrealIRCd has full control over the SSL/TLS versions in use
...
and not just the operating system.
This makes us use SSL_CTX_set_min_proto_version(), which unfortunately is
a less fine-grained control for disabling specific SSL/TLS versions.
However, after that we use SSL_CTX_set_options with SSL_OP_NO_xxx.
The latter is deprecated though. Will revisit this change before U5 release..
2019-07-07 10:22:29 +02:00
73bbf10170
Build tests: --enable-werror
2019-07-07 09:54:40 +02:00
fa39bafe99
tls-tests: Check not only against baseline but against all
...
[skip ci]
2019-07-07 09:34:30 +02:00
6a44b002da
Add cipherscan profile for openssl 1.0.1, as used by Debian 8 (jessie).
...
Main difference is that the curve used for ECDHE is fixed at prime256v1
rather than a list of multiple choices (this due to an openssl 1.0.1
limitation).
[skip ci]
2019-07-07 09:27:57 +02:00
0235c6f233
Remove 2 cipherscan profiles (only to reintroduce them later)
...
[skip ci]
2019-07-07 09:24:33 +02:00
3b3f63b990
Add HAVE_EXPLICIT_BZERO. Fix compile problems on Debian and other older
...
systems without explicit_bzero. Current usage is only in the PRNG which
is not very important anyway. We can re-visit later by attempting to
provide a fallback portable version, but from what I've seen this is
pretty ugly.
2019-07-07 09:18:34 +02:00
7ac11973d0
Fix crash in TOPIC with certain remote server traffic.
...
And make sure we don't change topic text if it comes from a remote link.
2019-07-06 17:48:44 +02:00
74325280dd
Due to new defaults, the baseline for the SSL/TLS changed as well.
2019-07-01 07:45:48 +02:00
74cf811759
Failed to initialize a variable in changes last week.
...
Not caught by tests due to lack of -O2, we should add a buildbot for that..
2019-07-01 07:40:49 +02:00
fea09b6659
Switch from RSA 4096 to ECC secp384r1
2019-06-30 10:53:58 +02:00
d3d9b499a7
Move src/ssl.cnf -> extras/ssl.cnf
...
[skip ci]
2019-06-30 10:25:19 +02:00
e90f6e0446
Remove 'make encpem'. Nobody uses this as it would mean you always need
...
to enter the private key password when UnrealIRCd is (re)started.
Similarly, remove all references to it on Windows as well, where people
thought clicking "Encrypt private key" was a good idea. Can't blame them,
it sounds good on first sight :D
[skip ci]
2019-06-30 10:23:15 +02:00
Bram Matthys