455420afc1
SNI-specific sts-policy is now possible. (As recommended by IRCv3 draft spec)
2017-08-09 15:39:52 +02:00
0f612a3b30
SNI: Fix for wildcard certificates
2017-08-09 15:20:38 +02:00
84776eeeb2
Add support for draft/sts http://ircv3.net/specs/core/sts-3.3.html
...
Docs: https://www.unrealircd.org/docs/Set_block#set::ssl::sts-policy::port
Example:
set {
ssl {
certificate "ssl/server.cert.pem";
key "ssl/server.key.pem";
sts-policy {
port 6697;
duration 180d;
};
};
};
IMPORTANT: Only use this if you know what STS is and what the
implications are. The most important things being A) set a correct
port and B) you need a 'real' SSL certificate and not a self-signed
certificate.
More documentation may follow at another place.
2017-08-09 14:16:03 +02:00
1cc6dd3d5b
Add Makefile and placeholder module.
2017-08-09 13:30:52 +02:00
6500af6ba5
* Use free_ssl_options from generic conf.
...
* Actually free ssl_options in free_ssl_options.
2017-08-09 13:27:50 +02:00
ea651384f8
Add groundwork for draft/sts (more to follow)
...
Module coders:
* The cap->visible(void) callback function is now cap->visible(aClient *)
* There is a new cap->parameter(aClient *) callback function.
* Various updates to subfunctions to pass 'sptr' (due to the above),
including clicap_find(sptr, ...)
* New CLICAP_FLAGS_UNREQABLE flag
Other:
* There is a new (src/)modules/cap directory containing the sts module,
well.. once I commit it :D
2017-08-09 13:21:36 +02:00
b2129205f9
Added support for the "Server Name Indication" (SNI) SSL/TLS extension.
...
See https://www.unrealircd.org/docs/Sni_block
Requested in #4380 by Eman.
2017-08-09 12:00:04 +02:00
590e345b8d
./autogen.sh (see previous commits)
2017-07-07 18:15:47 +02:00
e6a52ec919
Merge pull request #69 from binki/unreal40-moregitignore
...
Add src/Makefile (built) to .gitignore
2017-07-07 13:57:27 +02:00
0a8cd1347e
Merge pull request #68 from binki/without-privatelibdir
...
Support --without-privatelibdir for packagers.
2017-07-07 13:57:06 +02:00
6591e6bcee
Do not try to delete libcares when not using PRIVATELIBDIR.
2017-07-06 06:47:49 +00:00
4edcb9226c
Add src/Makefile (built) to .gitignore
2017-07-06 06:19:58 +00:00
2b94733cbe
Support --without-privatelibdir for packagers.
2017-07-06 06:11:21 +00:00
7b092f7aeb
Verify certificate when submitting bug report.
2017-06-19 16:28:50 +02:00
0c1f299b0b
UnrealIRCd 4.0.12.1 release
2017-06-02 08:56:24 +02:00
d27d3760c7
CAP NAK not sent for unrecognised CAPs in all cases. Reported by
...
jwheare (#4958 ).
2017-06-02 08:22:19 +02:00
072d8537b8
Prevent /OPER for oper blocks with non-existant operclass, as doing so
...
would only be confusing. Reported by Gottem (#4950 ).
2017-06-02 07:41:44 +02:00
7b8f17ef5e
Rename variable (no other changes)
2017-06-02 07:33:15 +02:00
6c3c55b4e5
Fix new user mode +Z (secureonlymsg) not working properly across
...
server links. Reported by HeXiLeD (#4953 ).
2017-05-28 09:41:11 +02:00
ffc5f0ce44
Update modules.optional.conf
2017-05-13 12:33:37 +02:00
2838ef6266
Mark all shipped modules as official (non-3rd-party).
2017-05-13 12:29:05 +02:00
50801f5068
Add conf/modules.optional.conf. This loads all additional modules that
...
are not in modules.default.conf.
2017-05-13 12:24:55 +02:00
01687486f0
Bump MAXCONNECTIONS for Windows. Due to FD number assignments this
...
value needs to be much higher than the number of clients the IRCd
should be able to hold. The new value is 10k which should allow
at least 1-2k clients.
2017-05-12 17:12:18 +02:00
b86419173a
Compile secureonlymsg module on Windows
2017-05-12 17:10:53 +02:00
bbf33b62dc
UnrealIRCd will now refuse to run as root, as promised a couple of versions ago.
...
https://www.unrealircd.org/docs/Do_not_run_as_root
2017-05-12 11:42:01 +02:00
3dc27370a1
Prepare for UnrealIRCd 4.0.12 release.
2017-05-12 11:24:36 +02:00
5e378fb02b
Since 95% of the crash reports are due to bugs in 3rd party modules we now
...
have to discourage people with 3rd party modules loaded from blindly
submitting crash reports.
2017-05-12 10:25:45 +02:00
0412c86d17
Update OpenFiles on listener close (not very common, but..)
2017-05-10 17:18:47 +02:00
a6f5460ad8
Update OpenFiles upon failed SSL connect to remote server. Reported by Eman ( #4948 ).
2017-05-10 17:03:45 +02:00
ee9f8441bc
Bump lag for remote MOTD requests.
2017-04-07 20:06:36 +02:00
0035cafdba
Fix server setting +b even if the ban list is full when using +f.
...
Reported by NoMiaus (#4906 ).
2017-03-26 15:48:05 +02:00
e62ea1dedd
Module coders: added two functions to search for user modes:
...
has_user_mode(acptr, 'i'): returns 1 / 0
find_user_mode('i'): returns the user mode (as 'long')
extern int has_user_mode(aClient *acptr, char mode);
extern long find_user_mode(char mode);
2017-03-26 15:40:36 +02:00
b6f8ddd456
Fix Jumpserver not working for SSL users due to old #ifdef USE_SSL.
...
Reported by NoMiaus (#4907 ).
2017-03-26 15:38:04 +02:00
0c6fb46704
Minor code cleanup
2017-03-22 16:32:59 +01:00
fcaa69157b
Fix crash when unloading (not reloading) module that uses ModData ( #4903 ).
2017-03-22 10:51:29 +01:00
e6a02003f5
Delayjoin (chanmode +D): When people are de-oped we now part 'hidden' users.
...
Prevents client desynch.
2017-03-22 08:25:03 +01:00
4c39648b03
Improve source code (setflags -> oldumodes)
2017-03-20 16:18:43 +01:00
cd0836572f
Fix /mode nick -t and force-rejoin. Reported by NoMiaus ( #4901 ).
2017-03-20 16:17:23 +01:00
ec9db8fd5f
Move match_user() to module (efunc in m_tkl)
2017-03-18 15:00:34 +01:00
000f9e10fc
'nocodes' module: also strip/block italic. Suggested by The_Myth ( #4898 ).
2017-03-18 14:50:49 +01:00
af694e0cbd
Fix crash in Windows GUI
2017-03-13 08:30:45 +01:00
0963cddd28
Vhosts were not synched correctly during linking. Reported by unic0rn ( #4890 ).
...
This was not really noticeable on 2 server networks, but in A-B-C linking setups
a vhost of user A would not show on server C.
2017-03-11 10:50:00 +01:00
abd4296d8e
Add support for negative ip/hostmask matching in deny channel / allow channel
...
and at some other places (any place which uses the 'mask' system).
This allows things like:
deny channel { channel "#help*"; };
allow channel { channel "#help-nolan"; mask !192.168.*; };
allow channel { channel "#help-lan"; mask 192.168.*; };
Similarly in vhost blocks etc etc..
2017-03-10 09:20:15 +01:00
f65d5fce8b
Add new option: set { hide-list { deny-channel }; };
...
This will hide channels in /LIST that are denied by deny channel blocks
(and not exempt via allow channel blocks).
2017-03-10 08:48:08 +01:00
5c417b4235
Fix minor memleak on /REHASH (set::sasl-server)
2017-03-08 17:30:28 +01:00
176566962a
Add support for 'mask' in allow channel { } and deny channel { }.
...
This so you can easily add allow/deny channel blocks for IP ranges.
Possibly not so useful for services-networks (ban/akick is very similar)
but has some use on serviceless networks.
2017-03-08 17:28:15 +01:00
9dc4e7d31b
Windows: shut up warning on certificate generation during installation.
...
WARNING: can't open config file: c:/libressl/ssl/openssl.cnf
2017-03-08 09:03:03 +01:00
cb59538309
Fix chanmode +f issue where unsetting parts were not effective.
...
For example: '+f [5j#i1,5m#m1,3n]:3' and then '+f [5j#i1,5m]:3'
In that case the '3n' was not removed and still effective, as
could be seen by a '/MODE #chan'. Reported by The_Myth (#4883 ).
2017-03-06 10:05:30 +01:00
9252ce30e9
Fix *NIX build (non Mac OS) by backing out all changes of past week.
2017-03-06 09:12:22 +01:00
2a4714ea73
Adjust curlinstall
2017-02-26 11:18:38 -08:00
Bram Matthys