829a3c8a1f
Made remote includes work with SSL protocols
2003-12-26 00:51:25 +00:00
632e0cbf88
- Improved SSL error msg sent to junk snomask.
2003-09-07 18:14:19 +00:00
f13b9b539e
- Fixed a compile error with openssl enabled at redhat 9.
2003-04-16 22:28:19 +00:00
7c9ba1feda
- Added SSL quit error messages
2003-04-10 19:58:30 +00:00
27928952dd
Possibly fixed an SSL crash
2003-04-08 23:49:01 +00:00
5a1bdba209
- Removed some debugging messages
2003-02-17 19:03:34 +00:00
0c12e70d59
- Fixed compile warning in ssl.c.
2003-02-15 18:16:57 +00:00
84596e0fc5
Redesigned "Dead socket" error msg thing. Added a error_str to client struct,
...
which is set if dead_link is called. You will now see "Write error",
"Max SendQ exceeded" etc error messages in the quit reason instead of just
the "Dead socket" message. Changed "notice" parameter of dead_link, now just
the reason and not a format string, maybe rename that var.
2003-02-02 00:48:02 +00:00
e333890b0f
Fixed SSL session cache bug, symptoms were: stunnel can only connect the 1st time,
...
reconnecting etc fails with (in stunnel log) "SSL_connect: Peer suddenly disconnected".
This happends with OpenSSL 0.9.7.
2003-01-23 17:03:53 +00:00
4bc07b8789
+- Added set::ssl::options, with three options:
...
+ fail-if-no-clientcert - If SSL client connects and doesn't provide a client certificate, abort connection immediately
+ verify-certificate - Check the certificate's validity using X509 methods, check if we trust CA's, etc.
+ It however does slip self signed certificates through UNLESS
+ no-self-signed - Don't allow self-signed certificates through (requires verify-certificate)
+- Made conf parser mention if we make a link->options with CONNECT_SSL if we don't support SSL (and remove the CONNECT_SSL flag)
+- Made conf parser mention if we make a SSL listener and we don't support SSL
+- Added set::ssl::trusted-ca-file, if enabled, it will point the SSL stuff to use that file as trusted CA's (for verify-certificate)
+- Made conf _not_ bitch that it doesn't know set::ssl
+- Removed some leftover client certificate stuff
2002-09-28 11:02:05 +00:00
282cc51768
- Changed auth method sslpubkey into sslclientcert, which means it will check the X509 certificate of the
...
user using X509_cmp. Also needing is some policy/conf setting to adjust if to reject invalid client certificates or whatever..
2002-09-27 16:08:03 +00:00
6926cca1bb
- Added Syzop's various zero-terminate patches and fixes for crashes when
...
you send commands like JOIN from a server directly
2002-09-07 01:32:00 +00:00
ff14d5d0bf
Compile warning cleanups
2002-09-01 18:33:47 +00:00
4aff4a0376
- More SSL debugging stuff..
2002-08-27 12:34:43 +00:00
a15ce8eb54
bah
2002-08-26 14:55:14 +00:00
275d304475
- Added set::ssl::certificate and set::ssl::key to point to where we got the certificat
...
PEM and the private key PEM
2002-08-21 17:10:46 +00:00
cc5258fe8a
Added EGD support
2002-08-18 20:28:33 +00:00
7af962ecf7
SSL fixes
2002-08-07 21:10:49 +00:00
80d837fa8b
Removed support for SSLv2
2002-08-05 17:54:52 +00:00
66eb6fa848
SSL stuff
2002-08-03 16:10:25 +00:00
0c730e8931
bah
2002-08-03 11:52:01 +00:00
ff4bc60486
Fixed SSL linking, again..
2002-08-03 11:09:20 +00:00
4d410f5982
- Seemingily we can't do SSLv3 only for ctx_server?
2002-08-02 11:54:03 +00:00
c9be3fbac8
+- Fixed some SSL errors. read() returns -1 on error, so ircd_SSL_write and
...
+ ircd_SSL_read must emulate the same. codemastr: could you check what the
+ win32 equiviant of EIO is? I don't think my WSAEIO or whatever I called it
+ in sys.h is correct.
2002-08-02 11:45:31 +00:00
c0af661c77
More SSL horror and fixed a missing , in m_who
2002-07-24 17:59:26 +00:00
5af8478d67
moo
2002-07-24 10:22:22 +00:00
2336498e9d
blah
2002-07-24 10:11:35 +00:00
d7c8623438
.
2002-07-24 10:00:17 +00:00
4e84c85ceb
- Added ircd/safe_SSL_read/write from bahamut+inet6/azzuranet. This can be done much nic
...
when newio is done.
2002-07-23 19:04:18 +00:00
8be7cbab05
Made all functiosn use new-style parameter lists
2002-01-28 00:38:02 +00:00
f52f030346
fix
2002-01-26 00:12:32 +00:00
58c667c7c3
Added a win32 dialog for the SSL .pem passwords
2002-01-25 23:11:29 +00:00
a3a04d9797
- Added link::cipher for #define USE_SSL, use this to select
...
ciphers, read example.conf for more. Closes #000016 . Suggested by narf
2002-01-25 22:22:11 +00:00
bebebf6cdf
+- Made support in *nix for encrypted SSL private keys,
...
+ "make encpem" to make an encrypted server key if you already have one
2002-01-01 16:25:29 +00:00
6bb18c87e5
Removed the three lines of code (!!) that caused the SSL freeze-on-connect
...
bug, gonna fix that error handling.
2001-11-14 20:28:13 +00:00
90d9c1df8c
Implimented snomask
2001-08-04 17:17:54 +00:00
464e787aac
added a new logging system using log {}
2001-03-21 20:42:15 +00:00
49152c8bcd
+- Fixed ssl_client_handshake bug reported by IpAddress
2001-03-07 16:19:49 +00:00
8b3c0d8b56
+- Made MembershipL->flood get bzero on out delegation
...
+- Made IRCd not crash on /kick from servers
2001-03-06 02:45:24 +00:00
b7b2155573
+- Some small SSL fixes ..
2001-02-19 18:13:53 +00:00
ba924cb7bc
+- Made more openssl binary detection using 'which'
...
+- Added message when trying to join a +z channel
+- New segmentation fault code by Kanzen_Greiver
2000-12-09 15:12:23 +00:00
606967c718
+- SSL error change to sendto_umode(UMODE_JUNK)
2000-12-01 16:45:34 +00:00
5d04afc6c2
+- Added infofield in /stats L for clients/listeners
...
+- Fixed a blocking socket thing
+- Fixed up /stats L bug
2000-12-01 11:31:23 +00:00
4eda3e1752
+- Fixed a typo in ssl.c
2000-11-30 11:19:54 +00:00
b318e6a66a
+- Added some network files and even more network files
...
+- Fixed some copyright stuff in ssl.c
+- Fixed a /map problem
2000-11-24 15:05:18 +00:00
7df008ead4
+- Changed some stuff with SSL, you may want to seperate server.pem into
...
+ server.key.pem and server.cert.pem (or "rm Makefile" and "./Config")
+- Fixed a couple of SJOIN/Link problems detected by Curt|s
2000-11-22 20:38:00 +00:00
bba7e664b6
+- Added so /gline and /shun accepts time periods in 1d2h3s etc. a recode of
...
+ some potvin stuff
+- Added so blocking is only effective when SSL_connect()'ing
2000-11-22 12:25:28 +00:00
7a3d7c8b7f
+- Added OPT target OPT_SJB64 and OPT_NOT_SJB64
...
+- Made SSL server<->server work, using __blocking__ sockets (this is only
+ in connect moment thou) -stskeeps
+- Removed 1.0 msg/s when not in HTM
2000-11-21 21:46:19 +00:00
ae3936aca5
+- Fixed \r\n bug, hopefully
...
+- made SSL use same cert client/server
+- Fixed help.c bug reported by Curt|s
+- Different fixes, unreal.tspre.org -> unrealircd.com
2000-11-19 19:45:02 +00:00
e6b2159245
+- Fixed the "Bad file descriptor" bug in SSL. This bugfix may be a bit risky
...
+ as it is manipulating BIO fds. The reason openssl freaked at this, was
+ that when a fd is closed, we change fds from 4 to 3 etc, in other words,
+ we renumber fds. SSL didn't know this and if you would call SSL_set_fd it
+ would close the connection/crash. Added SSL_change_fd() to change the FD
+ directly through BIO_set_fd.
2000-11-19 18:05:03 +00:00
codemastr