Bram Matthys
ecd06aa530
Now actually use PCRE2.
2015-06-01 09:51:33 +02:00
Travis McArthur
574297054c
Modify verification function calls
2015-06-01 00:38:50 -04:00
Travis McArthur
01f997f917
Allow opers to have oper-class
2015-05-31 23:41:57 -04:00
Travis McArthur
adf8a61625
Add support for adding/removing validators
2015-05-31 23:19:08 -04:00
Travis McArthur
7ca84567fe
Add oper ACL evaluation system
...
Still requires module and core hooks to be added, config test to be added, and to require these for perm validation - this enables core parser and querying of system though
2015-05-31 17:20:28 -04:00
Travis McArthur
d4bb75cd39
Add oper class parser and structs
2015-05-31 17:20:28 -04:00
Travis McArthur
ffe6877fbe
Clean up unnecessary stuff
2015-05-30 22:14:45 -04:00
Bram Matthys
58bd3cf60b
Preparations for #4356 (experimental / on-going):
...
* add general matching framework (aMatch type, unreal_match_xxx functions)
* change spamfilter { } block syntax
* add support for simple wildcard matching (non-regex, just '?' and '*')
This is the initial commit so the new lib is not in yet, 'regex' is not
functional (but 'posix' and 'simple' are working), linking has not been
fully tested and no warnings are printed yet. IOTW: work in progress!
2015-05-30 21:11:11 +02:00
Bram Matthys
39c3a03d14
found some more old webtv stuff.
2015-05-27 18:05:04 +02:00
Bram Matthys
542ef1acbb
move aJFlood * stuff from core to jointhrottle module, using ModData. (as per TODO)
2015-05-27 17:33:53 +02:00
Zoddo
9b9a35a155
Send numeric 396 on host changes
2015-05-27 00:15:29 +02:00
Bram Matthys
db97b23bcb
move to a single password entry in link block:
...
"password in link block should be plaintext OR should be the SSL fingerprint of the remote link (=better)"
2015-05-25 10:54:05 +02:00
Bram Matthys
8049136379
Restructure the entire link { } block ( #4032 ). Initial commit (missing autoconnect, ssl, etc).
2015-05-25 10:19:15 +02:00
Bram Matthys
c2ca896dea
Add new flag MOD_OPT_PERM_RELOADABLE. Can be used instead of MOD_OPT_PERM if
...
you want to permit re-loading but not complete un-loading of your module.
This way you get the benefits of being able to upgrade code on-the-fly but
can still disallow the user to do something potentially unwise.
2015-05-23 20:43:31 +02:00
Bram Matthys
3623ebae05
Add protection against SSL Renegotiation attacks ( #4046 ). Reported by seraph.
...
Also expose dead_link() to modules, IOTW: make it non-static.
2015-05-23 19:04:41 +02:00
Bram Matthys
c6fea92257
Port fix #4318 from 3.2.x:
...
For services who allow you to log in by account name but still allow you to
use a different nick: when you're logged in you are now considered
registered as far as channel mode +M (only registered users may speak and
+R (only registered users may join) are concerned. Same for user mode +R
(only allow private messages from registered users).
Tech: whenever services set SVID and it's not * and does not start with a
number, then we consider this user to be 'logged in'.
Whenever a user is set +r (s)he is also considered 'logged in'.
This way it's compatible with both older and new services and doesn't
introduce security issues with older services using servicetimestamp
for nick tracking or other means.
This issue was reported by ShawnSmith (#4318 ).
2015-05-23 17:06:44 +02:00
Bram Matthys
d5caf06ec5
bcrypt password hashing is now implemented ( #4335 ). Not yet documented.
2015-05-23 16:38:48 +02:00
Bram Matthys
4a38d0c838
make auth-type optional for passwords in config ( #4334 ).
...
Now you can just add password "$ZaJw56to$uSEc[etc..]"; to your configuration file without needing an explicit { md5; }; or { sha1; };.
Naturally you can still specify an auth-type if you want to, and for types like 'sslclientcert' it's still required.
2015-05-23 15:07:37 +02:00
Bram Matthys
bd65916b5a
more cleanups for AUTHENABLE_*
2015-05-23 09:15:24 +02:00
Travis McArthur
2dc8cb9e84
Allow win32 SSL inconsistencies
...
Fix issue in previous commit
2015-05-20 02:57:14 -04:00
Travis McArthur
aea09603a4
Remove USE_SSL macro and associated code
...
We no longer support non-SSL builds, remove related code
2015-05-20 02:48:34 -04:00
Travis McArthur
229bcca996
Remove Custom MD5 Implementation
...
We no longer support builds without OpenSSL - consequently we have no reason to keep our custom MD5 implementation, and probably shouldn't keep it around
2015-05-20 02:33:48 -04:00
Bram Matthys
9da1988375
change version to 3.4-alpha2
2015-05-19 11:27:44 +02:00
Bram Matthys
5ff5e01aa2
Rename moddata_client_XXX_string to moddata_client_XXX
2015-05-19 11:22:11 +02:00
Bram Matthys
7ad4b6db67
Module coders: introduce moddata_client_set_string() and moddata_client_get_string(). Will document later in ModData wiki page (which does not exist yet).
2015-05-18 17:15:02 +02:00
Bram Matthys
fa38dbf9e6
Added HOOKTYPE_WHOIS. May later be replaced by a more advanced system.
2015-05-18 16:45:31 +02:00
Bram Matthys
8caec780e4
modules can now simply include "unrealircd.h" rather than include various
...
files in a specific order and risk missing ones..
2015-04-25 13:34:29 +02:00
Bernard Spil
07e707ae5b
Fix build with LibreSSL
...
LibreSSL has removed RAND_egd completely, this patch adds RAND_egd
detection to configure and adds HAVE_RAND_EGD checks to the code where
required.
2015-03-10 11:55:37 +01:00
Adam
996c084d6f
Fix secureonly
2014-08-26 10:46:45 -04:00
Travis McArthur
8035168d5f
Move TKL checking back into run loop
2014-08-24 09:43:40 -07:00
Bram Matthys
20e9da6dff
When users connect they will receive a message telling them this IRC Server
...
software is experimental and that they should report any bugs or problems
on http://bugs.unrealircd.org/
2014-07-22 14:08:05 +02:00
Bram Matthys
40a46f5019
prepare for alpha1
2014-07-20 19:16:17 +02:00
Bram Matthys
94a6305880
Added config_report_ssl_error() which is now used when we failed to (re)initialize
...
SSL, may print a bit more meaningful errors (though rather long and obscure).
2014-07-20 17:45:58 +02:00
Bram Matthys
11d7b49130
Deny booting/rehashing if using SSL in listen or link blocks.
2014-07-20 17:08:54 +02:00
Bram Matthys
7ba2e3214c
First attempt at allowing server to boot if SSL is enabled but the
...
server/client SSL context failed to load (eg: no cert/key file).
2014-07-20 16:50:29 +02:00
Travis McArthur
ec294b1373
Fix build for clang
2014-07-05 12:47:03 -07:00
Travis McArthur
63cb121130
Modularize secureonly (+z)
2014-07-04 21:13:08 -07:00
Travis McArthur
3710fb67c4
Modularize regonlyspeak (+M), slightly modify can_send hook
2014-06-29 12:12:36 -07:00
Travis McArthur
fdeb6f06bf
Modularize nokicks (+Q)
2014-06-29 00:52:40 -07:00
Travis McArthur
2519f9d3ac
Modularize nonickchange (+N)
2014-06-29 00:21:17 -07:00
Travis McArthur
2e10afdd9c
Modularize channel mode +R, reg only - temporarily remove some logging
2014-06-29 00:01:50 -07:00
Travis McArthur
334763c21c
Modularize nonotice (+T)
2014-06-28 23:34:14 -07:00
Travis McArthur
5e657e5985
Modularize adminonly (+A)
2014-06-07 20:35:19 -07:00
Travis McArthur
5924674c3f
Remove unnecessary hook added (oops!)
2014-06-07 20:33:57 -07:00
Travis McArthur
df4597b869
Modularize operonly (+O)
2014-06-07 19:37:25 -07:00
Travis McArthur
b91f683800
Modularize noinvite (+V) and noknock (+K) in one commit since they share functionality
2014-06-06 22:02:40 -07:00
Heero
8cc0724e76
delayjoin: fix issue with timing on join causing bug
...
added hook for after data creation, before channel join complete
2014-06-05 01:04:31 -07:00
Heero
4956d01e34
Add +D/+d and remove +u
...
Permits users to add +D mode to hide join/part notifications except for +vohaq
until a user speaks
[#2906 ] Reported by Tranqer
2014-06-04 01:13:22 -07:00
Heero
e75cb1709d
[4246] Add set::link::bind-ip option to set default bind ip for link blocks
2014-06-03 23:39:30 -07:00
Bram Matthys
de3f9b9cc2
- Add server synching and broadcast functions for new ModData system.
...
- Also added an example module for coders (m_mdex), not compiled by default.
2014-06-01 20:06:28 +02:00