Update release notes header to conform to style

Refer to UnrealIRCd 6 module api page from the UnrealIRCd 5 module api page.
** UnrealIRCd 5.2.4 **
2026-06-24 22:06:37 +02:00 · 2022-05-03 11:45:58 +02:00 · 2022-02-06 07:42:59 +01:00 · 2022-01-28 17:03:07 +01:00 · 2022-01-02 09:47:35 +01:00 · 2021-12-29 20:09:59 +01:00
38 changed files with 1078 additions and 348 deletions
@@ -0,0 +1,5 @@
+Help out and make UnrealIRCd a better product!
+
+You can do so by reporting issues, testing, programming, documenting,
+translating, helping others, and more.
+See https://www.unrealircd.org/docs/Contributing
@@ -287,6 +287,22 @@ else
 	n="-n"
 fi

+date|egrep '2021|2022' 1>/dev/null 2>&1
+if [ "$?" -ne 0 ]; then
+	echo "*** WARNING ***"
+	echo "UnrealIRCd 5.x will no longer be supported after June 1, 2023."
+	echo "You should upgrade to a newer UnrealIRCd version before that date."
+	echo "See https://www.unrealircd.org/docs/UnrealIRCd_5_EOL"
+	echo $n . $c
+	sleep 1
+	echo $n . $c
+	sleep 1
+	echo $n . $c
+	echo ""
+	sleep 1
+	echo "Press ENTER to continue"
+	read xyz
+fi

 #parse arguments
 IMPORTEDSETTINGS=""
@@ -347,7 +363,7 @@ echo "We will now ask you a number of questions. You can just press ENTER to acc
 echo ""

 # This needs to be updated each release so auto-upgrading works for settings, modules, etc!!:
-UNREALRELEASES="unrealircd-5.2.1.1 unrealircd-5.2.1 unrealircd-5.2.1-rc1 unrealircd-5.2.0.2 unrealircd-5.2.0.1 unrealircd-5.2.0 unrealircd-5.2.0-rc1 unrealircd-5.0.9.1 unrealircd-5.0.9 unrealircd-5.0.9-rc1 unrealircd-5.0.8 unrealircd-5.0.8-rc1 unrealircd-5.0.7 unrealircd-5.0.7-rc1 unrealircd-5.0.6 unrealircd-5.0.5.1 unrealircd-5.0.5 unrealircd-5.0.4 unrealircd-5.0.3.1 unrealircd-5.0.3 unrealircd-5.0.2 unrealircd-5.0.1 unrealircd-5.0.0"
+UNREALRELEASES="unrealircd-5.2.3 unrealircd-5.2.2 unrealircd-5.2.1.1 unrealircd-5.2.1 unrealircd-5.2.1-rc1 unrealircd-5.2.0.2 unrealircd-5.2.0.1 unrealircd-5.2.0 unrealircd-5.2.0-rc1 unrealircd-5.0.9.1 unrealircd-5.0.9 unrealircd-5.0.9-rc1 unrealircd-5.0.8 unrealircd-5.0.8-rc1 unrealircd-5.0.7 unrealircd-5.0.7-rc1 unrealircd-5.0.6 unrealircd-5.0.5.1 unrealircd-5.0.5 unrealircd-5.0.4 unrealircd-5.0.3.1 unrealircd-5.0.3 unrealircd-5.0.2 unrealircd-5.0.1 unrealircd-5.0.0"
 if [ -f "config.settings" ]; then
 	. ./config.settings
 else
@@ -1,7 +1,8 @@
 # Security Policy

 ## Supported Versions
-* The latest *stable* release of the 5.x branch
+* The latest *stable* release of the 5.x branch (until 2023-07-01)
+* The latest *stable* release of the 6.x branch

 See [UnrealIRCd releases](https://www.unrealircd.org/docs/UnrealIRCd_releases) for information on older versions and End Of Life dates.

@@ -1,6 +1,6 @@
 #! /bin/sh
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69 for unrealircd 5.2.2-git.
+# Generated by GNU Autoconf 2.69 for unrealircd 5.2.4.
 #
 # Report bugs to <https://bugs.unrealircd.org/>.
 #
@@ -580,8 +580,8 @@ MAKEFLAGS=
 # Identity of this package.
 PACKAGE_NAME='unrealircd'
 PACKAGE_TARNAME='unrealircd'
-PACKAGE_VERSION='5.2.2-git'
-PACKAGE_STRING='unrealircd 5.2.2-git'
+PACKAGE_VERSION='5.2.4'
+PACKAGE_STRING='unrealircd 5.2.4'
 PACKAGE_BUGREPORT='https://bugs.unrealircd.org/'
 PACKAGE_URL='https://unrealircd.org/'

@@ -1330,7 +1330,7 @@ if test "$ac_init_help" = "long"; then
  # Omit some internal or obsolete options to make the list less imposing.
  # This message is too long to be a string in the A/UX 3.1 sh.
  cat <<_ACEOF
-\`configure' configures unrealircd 5.2.2-git to adapt to many kinds of systems.
+\`configure' configures unrealircd 5.2.4 to adapt to many kinds of systems.

 Usage: $0 [OPTION]... [VAR=VALUE]...

@@ -1396,7 +1396,7 @@ fi

 if test -n "$ac_init_help"; then
  case $ac_init_help in
-     short | recursive ) echo "Configuration of unrealircd 5.2.2-git:";;
+     short | recursive ) echo "Configuration of unrealircd 5.2.4:";;
   esac
  cat <<\_ACEOF

@@ -1554,7 +1554,7 @@ fi
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
  cat <<\_ACEOF
-unrealircd configure 5.2.2-git
+unrealircd configure 5.2.4
 generated by GNU Autoconf 2.69

 Copyright (C) 2012 Free Software Foundation, Inc.
@@ -1923,7 +1923,7 @@ cat >config.log <<_ACEOF
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.

-It was created by unrealircd $as_me 5.2.2-git, which was
+It was created by unrealircd $as_me 5.2.4, which was
 generated by GNU Autoconf 2.69.  Invocation command line was

  $ $0 $@
@@ -2331,7 +2331,7 @@ _ACEOF


 # Minor version number (e.g.: Z in X.Y.Z)
-UNREAL_VERSION_MINOR="2"
+UNREAL_VERSION_MINOR="4"

 cat >>confdefs.h <<_ACEOF
 #define UNREAL_VERSION_MINOR $UNREAL_VERSION_MINOR
@@ -2341,7 +2341,7 @@ _ACEOF
 # The version suffix such as a beta marker or release candidate
 # marker. (e.g.: -rcX for unrealircd-3.2.9-rcX). This macro is a
 # string instead of an integer because it contains arbitrary data.
-UNREAL_VERSION_SUFFIX="-git"
+UNREAL_VERSION_SUFFIX=""

 cat >>confdefs.h <<_ACEOF
 #define UNREAL_VERSION_SUFFIX "$UNREAL_VERSION_SUFFIX"
@@ -7659,7 +7659,7 @@ fi

 if test "$has_system_cares" = "no"; then :

-cares_version="1.17.1"
+cares_version="1.17.2"
 { $as_echo "$as_me:${as_lineno-$LINENO}: result: extracting c-ares resolver library" >&5
 $as_echo "extracting c-ares resolver library" >&6; }
 cur_dir=`pwd`
@@ -8870,7 +8870,7 @@ cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by unrealircd $as_me 5.2.2-git, which was
+This file was extended by unrealircd $as_me 5.2.4, which was
 generated by GNU Autoconf 2.69.  Invocation command line was

  CONFIG_FILES    = $CONFIG_FILES
@@ -8933,7 +8933,7 @@ _ACEOF
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
 ac_cs_version="\\
-unrealircd config.status 5.2.2-git
+unrealircd config.status 5.2.4
 configured by $0, generated by GNU Autoconf 2.69,
  with options \\"\$ac_cs_config\\"

@@ -7,7 +7,7 @@ dnl src/windows/unrealinst.iss
 dnl doc/Config.header
 dnl src/version.c.SH

-AC_INIT([unrealircd], [5.2.2-git], [https://bugs.unrealircd.org/], [], [https://unrealircd.org/])
+AC_INIT([unrealircd], [5.2.4], [https://bugs.unrealircd.org/], [], [https://unrealircd.org/])
 AC_CONFIG_SRCDIR([src/ircd.c])
 AC_CONFIG_HEADER([include/setup.h])
 AC_CONFIG_AUX_DIR([autoconf])
@@ -34,13 +34,13 @@ UNREAL_VERSION_MAJOR=["2"]
 AC_DEFINE_UNQUOTED([UNREAL_VERSION_MAJOR], [$UNREAL_VERSION_MAJOR], [Major version number (e.g.: Y for X.Y.Z)])

 # Minor version number (e.g.: Z in X.Y.Z)
-UNREAL_VERSION_MINOR=["2"]
+UNREAL_VERSION_MINOR=["4"]
 AC_DEFINE_UNQUOTED([UNREAL_VERSION_MINOR], [$UNREAL_VERSION_MINOR], [Minor version number (e.g.: Z for X.Y.Z)])

 # The version suffix such as a beta marker or release candidate
 # marker. (e.g.: -rcX for unrealircd-3.2.9-rcX). This macro is a
 # string instead of an integer because it contains arbitrary data.
-UNREAL_VERSION_SUFFIX=["-git"]
+UNREAL_VERSION_SUFFIX=[""]
 AC_DEFINE_UNQUOTED([UNREAL_VERSION_SUFFIX], ["$UNREAL_VERSION_SUFFIX"], [Version suffix such as a beta marker or release candidate marker. (e.g.: -rcX for unrealircd-3.2.9-rcX)])

 AC_PATH_PROG(RM,rm)
@@ -700,7 +700,7 @@ AS_IF([test "$has_system_cares" = "no"], [
 dnl REMEMBER TO CHANGE WITH A NEW C-ARES RELEASE!
 dnl NOTE: when changing this here, ALSO change it in extras/curlinstall
 dnl       and in the comment in this file around line 400!
-cares_version="1.17.1"
+cares_version="1.17.2"
 AC_MSG_RESULT(extracting c-ares resolver library)
 cur_dir=`pwd`
 cd extras
@@ -7,7 +7,7 @@
 \___/|_| |_|_|  \___|\__,_|_|\___/\_| \_| \____/\__,_|

                               Configuration Program
-                                for UnrealIRCd 5.2.2-git
+                                for UnrealIRCd 5.2.4
                                    
 This program will help you to compile your IRC server, and ask you
 questions regarding the compile-time settings of it during the process. 
@@ -1,16 +1,95 @@
-UnrealIRCd 5.2.2-git Release Notes
-===================================
-This is git, latest bleeding edge. It is not meant to be used on production servers.
+UnrealIRCd 5.2.4
+=================

-UnrealIRCd 5.2.1 Release Notes
-===============================
+This release fixes a crash bug that can be triggered by ordinary users.
+
+Fixes:
+* Fix crash that can be triggered by regular users if you have any `deny dcc`
+  blocks in the config or any spamfilters with the `d` (DCC) target.
+  NOTE: You don't *have* to upgrade to 5.2.4 to fix this, you can also
+  hot-patch this issue without restart, see the news announcement.
+
+Also important:
+* [UnrealIRCd 6](https://www.unrealircd.org/docs/What's_new_in_UnrealIRCd_6) is the new "stable"
+* UnrealIRCd 5.2.x ("oldstable")
+  [end of support dates](https://www.unrealircd.org/docs/UnrealIRCd_5_EOL):
+  * Bug fixes until July 1, 2022 (no more feature enhancements)
+  * Security fixes until July 1, 2023
+
+UnrealIRCd 5.2.3
+-----------------
+
+This release contains a couple of small changes.
+
+Enhancements:
+* Spanish example conf was added (`conf/help/example.es.conf`)
+
+Fixes:
+* [set::anti-flood::connect-flood](https://www.unrealircd.org/docs/Anti-flood_settings#connect-flood)
+  was only expiring entries every 2 minutes. Only after a `REHASH`
+  the configuration file setting was used.
+* Memory leak in websocket module
+* Send `WALLOPS` back to the sender too
+
+Changes:
+* Update `HELPOP` docs
+* Add information on EOL date
+* Add `CONTRIBUTING.md` file with a reference to docs on
+  [how people can help out](https://www.unrealircd.org/docs/Contributing).
+
+UnrealIRCd 5.2.2
+-----------------
+
+Previous release 5.2.1.1 turned out to be good and stable. This 5.2.2 release
+only contains some minor changes.
+
+If you are still using UnrealIRCd 5.0.x then we recommend you to upgrade
+to 5.2.2 in the next few weeks/months. Just as a reminder: 5.2.x is the
+direct successor to 5.0.9, there is
+[no support for 5.0.x](https://www.unrealircd.org/docs/FAQ#about-52x).
+
+Fixes:
+* Fix issues with Let's Encrypt certificates for
+  [remote includes](https://www.unrealircd.org/docs/Remote_includes) (quite
+  common) and with linking to servers with link::verify-certificate enabled
+  (more rare). Both issues only happen with:
+  * OpenSSL 1.0.2 and older, which is officially unsupported, but still in
+    use on e.g. Debian 8 and Ubuntu 16.04.
+  * LibreSSL, such as with UnrealIRCd on Windows
+* OpenBSD compile issue when using shipped c-ares
+
+Enhancements:
+* [set::allowed-nickchars](https://www.unrealircd.org/docs/Nick_Character_Sets):
+  added ```arabic-utf8```
+* [set::server-linking](https://www.unrealircd.org/docs/Set_block#set::server-linking):
+  add another autoconnect-strategy called ```sequential-fallback```.
+
+Changes:
+* Shipped libs: updated c-ares to 1.17.2
+* Windows build: updated LibreSSL to 3.3.5
+
+Module coders / IRC protocol:
+* S2S: Allow ```SVSLOGIN``` also when
+ [set::sasl-server](https://www.unrealircd.org/docs/Set_block#set::sasl-server)
+ is not set.
+* Some minor ```CHATHISTORY``` fixes, for example the subcommand is now
+  case-insensitive.
+* You can use the new ```UNREAL_VERSION``` macro. It is easier than the
+  old individual UNREAL_VERSION_MAJOR/MINOR/etc macros.
+
+UnrealIRCd 5.2.1.1
+-------------------
+
+UnrealIRCd 5.2.1.1 fixes an issue with SASL services autodetection and mechlist in
+5.2.1.
+
+UnrealIRCd 5.2.1
+-----------------

 This is UnrealIRCd 5.2.1. Even though only a month has passed since 5.2.0,
 this release comes with several new features and some major bug fixes.
 Please report any issues to https://bugs.unrealircd.org/.

-(5.2.1.1 fixes an issue with SASL services autodetection and mechlist in 5.2.1)
-
 Enhancements:
 * The [allow block](https://www.unrealircd.org/docs/Allow_block)
  now uses allow::mask instead of allow::ip and allow::hostname.
@@ -102,7 +181,7 @@ on disk and allows clients to fetch hundreds/thousands of lines.
 Upgrading and the 5.0.x series
 -------------------------------
 UnrealIRCd 5.2.0 is the direct successor to 5.0.9/5.0.9.1.
-There will be [no further 5.0.x releases](https://www.unrealircd.org/docs/FAQ#About_the_new_5.2.x_series),
+There will be [no further 5.0.x releases](https://www.unrealircd.org/docs/FAQ#about-52x),
 in particular there will be no 5.0.10.

 Only four bugs that affect a limited number of people/networks were fixed.
@@ -0,0 +1,610 @@
+/* Archivo de configuración para UnrealIRCd 5
+ *
+ * Simplemente copie este archivo a su directorio conf /, llámelo
+ * 'unrealircd.conf' y recorrerlo línea por línea (¡edítalo!)
+ *
+ * Importante: Todas las líneas, excepto { y } terminan con un;
+ * Esto es muy importante, si pierde un; en algún lugar entonces el
+ * el analizador de archivos de configuración se quejará y el archivo no
+ * ¡será procesado correctamente!
+ * Si esta es su primera experiencia con una configuración de UnrealIRCd
+ * entonces realmente le recomendamos que lea un poco sobre la sintaxis,
+ * esto solo toma unos minutos y te ayudará mucho:
+ * https://www.unrealircd.org/docs/Configuration#Configuration_file_syntax
+ *
+ * Documentación de UnrealIRCd 5 (¡muy extensa!):
+ * https://www.unrealircd.org/docs/Main_Page/es
+ *
+ * Preguntas frecuentes:
+ * https://www.unrealircd.org/docs/FAQ
+ *
+ */
+
+/* Esto es un comentario, todo el texto aquí se ignora (tipo de comentario #1) */
+// Esto también es un comentario, esta línea se ignora (tipo de comentario #2)
+#Esto también es un comentario, nuevamente esta línea se ignora (tipo de comentario # 3)
+
+/* UnrealIRCd hace un uso intensivo de módulos. Los módulos le permiten
+ * personalizar el conjunto de funciones que desea habilitar en UnrealIRCd.
+ * Vea más: https://www.unrealircd.org/docs/Modules
+ *
+ * Al usar la inclusión a continuación, le indicamos al IRCd que lea el archivo
+ * 'modules.default.conf' este cargará más de 150 módulos
+ * cargados con UnrealIRCd. En otras palabras: esto simplemente cargará
+ * todas las funciones disponibles en UnrealIRCd.
+ * Si está configurando UnrealIRCd por primera vez, le sugerimos
+ * utilizar este. Entonces, cuando todo esté en funcionamiento, puedes venir
+ * volver más tarde para personalizar la lista (si así lo desea).
+ */
+include "modules.default.conf";
+
+/* Ahora incluyamos algunos otros archivos:
+ * - help / help.conf para nuestro sistema on-IRC /HELPOP
+ * - badwords.conf para canal y modo de usuario +G
+ * - spamfilter.conf como ejemplo de uso de filtro de texto.
+ *   (comentado)
+ * - operclass.default.conf contiene algunas buenas operclasses que
+ * puedes usarlo en tus bloques operativos.
+ */
+include "help/help.conf";
+include "badwords.conf";
+//include "spamfilter.conf";
+include "operclass.default.conf";
+
+/* Este es el bloque me {} que básicamente dice quiénes somos.
+ * Define el nombre de nuestro servidor, alguna línea de información y un "sid" único.
+ * La identificación del servidor (sid) debe comenzar con un dígito seguido de dos dígitos o
+ * letras. El sid debe ser único para su red IRC (cada servidor debe
+ * tiene su propio sid).
+ */
+me {
+	name "irc.ejemplo.org";
+	info "Servidor EjemploNET";
+	sid "001";
+}
+
+/* El bloque admin {} define lo que los usuarios verán si escriben /ADMIN.
+ * Normalmente contiene información sobre cómo contactar al administrador.
+ */
+admin {
+	"Bob Smith";
+	"bob";
+	"correo-electrónico@ejemplo.org";
+}
+
+/* Los clientes y servidores se colocan en bloques de clase {}, los definimos aquí.
+ * Los bloques de clase constan de los siguientes elementos:
+ * - pingfreq: con qué frecuencia hacer ping a un usuario /servidor (en segundos)
+ * - connfreq: con qué frecuencia intentamos conectarnos a este servidor (en segundos)
+ * - sendq: el tamaño máximo de cola para una conexión
+ * - recvq: cola de recepción máxima de una conexión (control de inundaciones)
+ */
+
+/* Clase de cliente con buenos valores predeterminados */
+class clients
+{
+	pingfreq 90;
+	maxclients 1000;
+	sendq 200k;
+	recvq 8000;
+}
+
+/* Clase especial para IRCOps con límites superiores */
+class opers
+{
+	pingfreq 90;
+	maxclients 50;
+	sendq 1M;
+	recvq 8000;
+}
+
+/* Clase de servidor con buenos valores predeterminados */
+class servers
+{
+	pingfreq 60;
+	connfreq 15; /* intenta conectarte cada 15 segundos */
+	maxclients 10; /* máximo de servidores */
+	sendq 20M;
+}
+
+/* Bloques de permitir definen qué clientes pueden conectarse a este servidor.
+ * Esto le permite agregar una contraseña de servidor o restringir el servidor a
+ * IP específicas únicamente. También configuras las conexiones máximas
+ * permitido por IP aquí.
+ * Ver también: https://www.unrealircd.org/docs/Allow_block
+ */
+
+/* Permitir que todos entren, pero solo 3 conexiones por IP */
+allow {
+	mask *;
+	class clients;
+	maxperip 3;
+}
+
+/* Ejemplo de un bloque de permiso especial en una IP específica:
+ * Requiere que los usuarios de esa IP se conecten con una contraseña. Si la contraseña
+ * es correcto, entonces permite 20 conexiones en esa IP.
+ */
+
+allow {
+	mask 192.0.2.1;
+	class clients;
+	password "algunacontraseña";
+	maxperip 20;
+}
+
+/* Los bloques de operaciones definen sus operadores de IRC.
+ * Los operadores de IRC son personas que tienen "derechos adicionales" en comparación con otros,
+ * por ejemplo, pueden /KILL a otras personas, iniciar la vinculación del servidor,
+ * /JOIN a canales aunque estén prohibidos, etc.
+ *
+ * Para obtener más información sobre cómo convertirse en un IRCOp y cómo administrar
+ * tareas, consulte: https://www.unrealircd.org/docs/IRCOp_guide
+ *
+ * Para obtener detalles sobre el bloque oper {} en sí, consulte
+ * https://www.unrealircd.org/docs/Oper_block
+ */
+
+/* Aquí hay un ejemplo de bloque de operador para 'bobsmith' con contraseña 'test'.
+ * ¡¡DEBES cambiar esto !!
+ */
+
+oper bobsmith {
+	class opers;
+	mask *@*;
+	password "test";
+	/* Los permisos de operador se definen en un bloque 'operclass'.
+     * Ver https://www.unrealircd.org/docs/Operclass_block
+     * UnrealIRCd viene con una serie de bloques predeterminados, consulte
+     * el artículo para una lista completa. Elegimos 'netadmin' aquí.
+     */
+	operclass netadmin;
+	swhois "es un Administrador de Red";
+	vhost netadmin.ejemplo.org;
+}
+
+/* Los bloques de escucha definen los puertos donde el servidor debe escuchar.
+ * En otras palabras: los puertos que los clientes y servidores pueden usar para
+ * conectarse a este servidor.
+ * 
+ * Sintaxis:
+ * listen {
+ * { 
+ *   ip <ip>;
+ *   port <puerto>;
+ *   options {
+ *     <opciones....>;
+ *   }
+ * }
+ */
+
+/* Puerto estándar para IRC 6667 */
+listen {
+	ip *;
+	port 6667;
+}
+
+/* Puerto estándar para IRC SSL/TLS 6697 */
+listen {
+	ip *;
+	port 6697;
+	options { tls; }
+}
+
+/* Puerto especial SSL/TLS servers-only/(Solo servidores) para enlaces */
+listen {
+	ip *;
+	port 6900;
+	options { tls; serversonly; }
+}
+
+/* NOTA: Si está en una shell IRCd con varias IP y usa
+ * los bloques listen {} anteriores, es probable que obtenga un
+ * Error "address is already in use" y el ircd no se inicia.
+ * Esto significa que DEBE vincularse a una IP específica en lugar de '*' como:
+ * escuchar { ip 1.2.3.4; puerto 6667; }
+ * Por supuesto, reemplace la IP con la IP que se le asignó.
+ */
+
+/*
+ * Los bloques de enlaces le permiten enlazar varios servidores para formar una red.
+ * Ver https://www.unrealircd.org/docs/Tutorial:_Linking_servers
+ */
+
+link hub.ejemplo.org
+{
+	incoming {
+		mask *@algo;
+	}
+
+	outgoing {
+		bind-ip *; /* o explícitamente una IP */
+		hostname hub.ejemplo.org;
+		port 6900;
+		options { tls; }
+	}
+
+    /* Usamos la huella digital SPKI del otro servidor para la autenticación.
+     * Ejecute './unrealircd spkifp' en el otro lado para obtenerlo.
+     */
+
+	password "AABBCCDDEEFFGGHHIIJJKKLLMMNNOOPPQQRRSSTTUUV=" { spkifp; }
+
+	class servers;
+}
+
+/* El bloqueo de enlaces para servicios suele ser mucho más sencillo.
+ * Para obtener más información sobre qué son los Servicios,
+ * ver https://www.unrealircd.org/docs/Services
+ */
+
+link servicios.ejemplo.org
+{
+	incoming {
+		mask 127.0.0.1;
+	}
+
+	password "cambiameporfavor";
+
+	class servers;
+}
+
+/* Las líneas U dan a otros servidores (incluso) más poder/comandos.
+ * Si utiliza servicios debe agregarlos aquí.
+ * ¡¡¡NUNCA ponga aquí el nombre de un servidor UnrealIRCd !!!
+ */
+
+ulines {
+	servicios.ejemplo.org;
+}
+
+/* Aquí puede agregar una contraseña para los comandos solo IRCOp /DIE y /RESTART.
+ * Esto está destinado principalmente a proporcionar una pequeña protección contra accidentes
+ * se reinicia y el servidor se mata.
+ */
+ 
+drpass {
+	restart "reiniciar";
+	die "muere";
+}
+
+/* El bloque de registros define qué se debe registrar y en qué archivo.
+ * Ver también https://www.unrealircd.org/docs/Log_block
+ */
+
+/* Este es un buen valor predeterminado, registra todo */
+log "ircd.log" {
+	flags {
+		oper;
+		connects;
+		server-connects;
+		kills;
+		errors;
+		flood;
+		sadmin-commands;
+		chg-commands;
+		oper-override;
+		tkl;
+		spamfilter;
+	}
+}
+
+/ * Con "aliases" puedes crear un alias como /ALGO para enviar un mensaje
+  * algún usuario o bot. Suelen utilizarse para servicios.
+  *
+  * Tenemos varios archivos de alias preestablecidos, consulte el directorio alias /.
+  * Como ejemplo, aquí incluimos todos los alias utilizados para los servicios de anope.
+  * /
+
+include "aliases/anope.conf";
+
+/* Prohibir los apodos para que no puedan ser utilizados por usuarios habituales. */
+ban nick {
+	mask "*C*h*a*n*S*e*r*v*";
+	reason "Reservado para Servicios";
+}
+
+/* Prohibir ip.
+ * Tenga en cuenta que normalmente se usa /KLINE, /GLINE y /ZLINE para esto.
+ */
+
+ban ip {
+	mask 195.86.232.81;
+	reason "Te odio";
+}
+
+/* Ban server - if we see this server linked to someone then we delink */
+ban server {
+	mask eris.berkeley.edu;
+	reason "Sal de aquí.";
+}
+
+/* Banear un user - solo como ejemplo, normalmente usa /KLINE or /GLINE para esto */
+
+ban user {
+	mask *tirc@*.saturn.bbn.com;
+	reason "Idiota";
+}
+
+/* Banear realname te permite prohibir clientes en función de su 'nombre real'
+ * o campo 'gecos'.
+ */
+
+ban realname {
+	mask "Equipo Swat";
+	reason "mIRKFORCE";
+}
+
+ban realname {
+	mask "sub7server";
+	reason "sub7";
+}
+
+/* Excepciones de prohibición y TKL. Le permite eximir a los usuarios/máquinas de
+ * KLINE, GLINE, etc.
+ * Si es un IRCOp con una IP estática (y no hay personas que no sean de confianza en esa IP)
+ * entonces le sugerimos que se agregue aquí. De esa manera siempre puedes entrar
+ * incluso si accidentalmente te aplicas una prohibición de * LINE.
+ */
+
+/* Excepciones, te protege de KLINE and ZLINE */
+
+except ban {
+	mask *@192.0.2.1;
+	//      puede agregar más entradas de máscara aquí..
+}
+
+/* excepto prohibir con tipo 'all' te protege de GLINE, GZLINE, QLINE, SHUN */
+
+except ban {
+	mask *@192.0.2.1;
+	type all;
+}
+
+/* Con deny dcc puedes prohibir nombres de archivo para DCC */
+
+deny dcc {
+	filename "*sub7*";
+	reason "Posible Sub7 Virus";
+}
+
+/* deny channel te perimte banear un canal entero (mascará) */
+
+deny channel {
+	channel "*warez*";
+	reason "Warez es ilegal";
+	class "clients";
+}
+
+/* VHosts (Virtual Hosts) permite a los usuarios adquirir un host diferente.
+ * Ver https://www.unrealircd.org/docs/Vhost_block
+ */
+
+/* Ejemplo de vhost que puede usar. En el tipo de IRC: /VHOST test test
+ * NOTA: solo las personas con un host 'unrealircd.com' pueden usarlo así
+ * asegúrese de cambiar vhost :: mask antes de realizar la prueba.
+ */
+
+vhost {
+	vhost odio.microsefrs.com;
+	mask *@unrealircd.com;
+	login "testeo";
+	password "testeo";
+}
+
+/* Los bloques de lista negra consultarán un servicio de lista negra de DNS externo
+ * cada vez que un usuario se conecta, para ver si se conoce la dirección IP
+ * por causar ataques con drones, es una máquina pirateada conocida, etc.
+ * Documentación: https://www.unrealircd.org/docs/Blacklist_block
+ * O simplemente eche un vistazo a los bloques a continuación.
+ */
+
+/* DroneBL, probablemente la lista negra más popular utilizada por los servidores IRC.
+ * Consulte https://dronebl.org/ para obtener su documentación y el
+ * significado de los tipos de respuesta. En el momento de escribir este artículo utilizamos tipos:
+ * 3: IRC Drone, 5: Embotellador, 6: Spambot o drone desconocido,
+ * 7: DDoS Drone, 8: Proxy SOCKS, 9: Proxy HTTP, 10: ProxyChain,
+ * 11: Proxy de página web, 12: Open DNS Resolver, 13: Atacantes de fuerza bruta,
+ * 14: Proxy Wingate abierto, 15: Enrutador / puerta de enlace comprometido,
+ * 16: Gusanos de autorooting.
+ */
+
+blacklist dronebl {
+        dns {
+                name dnsbl.dronebl.org;
+                type record;
+                reply { 3; 5; 6; 7; 8; 9; 10; 11; 12; 13; 14; 15; 16; }
+        }
+        action gline;
+        ban-time 24h;
+        reason "Proxy/Drone detectado. Consulte https://dronebl.org/lookup?ip=$ip para más detalles.";
+}
+
+/* EFnetRBL, consulte https://rbl.efnetrbl.org/ para obtener documentación
+ * y el significado de los tipos de respuesta.
+ * Al momento de escribir este artículo: 1 es proxy abierto, 4 es TOR, 5 es drones/flooding.
+ *
+ * NOTA: Si desea permitir proxies TOR en su servidor, entonces
+ * necesita eliminar el '4;' a continuación en la sección de respuesta.
+ */
+
+blacklist efnetrbl {
+        dns {
+                name rbl.efnetrbl.org;
+                type record;
+                reply { 1; 4; 5; }
+        }
+        action gline;
+        ban-time 24h;
+        reason "Proxy/Drone detectado. Consulte https://rbl.efnetrbl.org/?i=$ip para más detalles.";
+}
+
+/* Puede incluir otros archivos de configuración */
+/* include "klines.conf"; */
+
+/* Configuración de la red */
+set {
+	network-name 		"EjemploNET";
+	default-server 		"irc.ejemplo.org";
+	services-server 	"services.ejemplo.org";
+	stats-server 		"stats.ejemplo.org";
+	help-channel 		"#Ayuda";
+	hiddenhost-prefix	"Clk";
+	prefix-quit 		"Quit";
+
+	/* Las claves de ocultación deben ser las mismas en todos los servidores de la red.
+     * Se utilizan para generar hosts enmascarados y deben mantenerse en secreto.
+     * Las claves deben ser 3 cadenas aleatorias de 50-100 caracteres
+     * y debe constar de minúsculas (a-z), mayúsculas (A-Z) y dígitos (0-9).
+     * SUGERENCIA: en * NIX, puede ejecutar './unrealircd gencloak' en su shell/Vps para 
+     * que UnrealIRCd genere 3 cadenas aleatorias para ti.
+     */
+	cloak-keys {
+		"aoAr1HnR6gl3sJ7hVz4Zb7x4YwpW";
+		"uno más";
+		"y otro más";
+	}
+}
+
+/* Configuración específica del servidor */
+
+set {
+	kline-address "setea.un.correo.electrónico"; /* Correo electrónico o URL que se muestra cuando un usuario está baneado */
+	modes-on-connect "+ixw"; /* cuando los usuarios se conectan, obtendrán estos modos de usuario */
+	modes-on-oper "+xws"; /* cuando alguien se convierte en IRCOp obtendrá estos modos */
+	modes-on-join "+nt"; /* modos de canal predeterminados cuando se crea un nuevo canal */
+	oper-auto-join "#opers"; /* Las IRCOps se unen automáticamente a este canal. */
+	options {
+		hide-ulines; /* ocultar las líneas U en /MAP and /LINKS */
+		show-connect-info; /* muestra "looking up your hostname" cuando conectas */
+	}
+
+	maxchannelsperuser 10; /* Número máximo de canales que un usuario puede /JOIN */
+
+	/* El tiempo mínimo que un usuario debe estar conectado antes de que se le permita
+     * usar un mensaje QUIT. Con suerte, esto ayudará a detener el spam.
+     */
+	anti-spam-quit-message-time 10s;
+
+	/* O simplemente setea un quit estático, significa que cualquier /QUIT es ignorado */
+	/* static-quit "Client quit";	*/
+
+	/* static-part hace lo mismo para /PART */
+	/* static-part yes; */
+
+	/* Protección contra flood:
+     * Hay muchas configuraciones para esto y la mayoría tienen buenos valores predeterminados.
+     * Ver https://www.unrealircd.org/docs/Set_block#set::anti-flood
+     */
+	anti-flood {
+	}
+
+	/* Opciones de Filtro de texto */
+	spamfilter {
+		ban-time 1d; /* la duracion por defecto de un *LINE seteado por el filtro de texto */
+		ban-reason "Spam/Publicidad"; /* razón por defecto */
+		virus-help-channel "#ayuda"; /* canal de uso para 'viruschan' */
+		/* except "#ayuda"; inmunidad para el canal Ayuda del filtro de texto */
+	}
+
+	/* Restringir ciertos comandos.
+	 * Ver https://www.unrealircd.org/docs/Set_block#set::restrict-commands
+	 */
+	restrict-commands {
+		list {
+			connect-delay 60;
+			exempt-identified yes;
+			exempt-reputation-score 24;
+		}
+		invite {
+			connect-delay 120;
+			exempt-identified yes;
+			exempt-reputation-score 24;
+		}
+		/* Además de la capacidad de restringir cualquier comando,
+         * como se muestra arriba. También hay 4 tipos especiales
+         * que puede restringir. Estos son "private-message",
+         * "private-notice", "channel-message" y "channel-notice".
+         * Están comentados (desactivados) en este ejemplo:
+         */
+		//private-message {
+		//	connect-delay 10;
+		//}
+		//private-notice {
+		//	connect-delay 10;
+		//}
+	}
+}
+
+/*
+ * Lo siguiente configurará la limitación de la conexión de "unknown users".
+ *
+ * Cuando UnrealIRCd detecta una gran cantidad de usuarios que se conectan desde direcciones IP
+ * que no se han visto antes, se rechazan las conexiones de las nuevas IP
+ * por encima de la configuración establecida. Por ejemplo, 10:60 solo pueden conectarse 10 usuarios por minuto
+ * que no se hayan visto antes. Las direcciones IP conocidas siempre pueden ingresar,
+ * independientemente de la configuración establecida. Lo mismo para los usuarios que inician sesión con SASL.
+ *
+ * Consulte también https://www.unrealircd.org/docs/Connthrottle para obtener más detalles.
+ * O simplemente siga leyendo los ajustes de configuración predeterminados a continuación:
+ */
+
+set {
+	connthrottle {
+		/* Primero debemos configurar lo que llamamos "known users".
+         * De forma predeterminada, estos son usuarios en direcciones IP que tienen
+         * una puntuación de 24 o más. Una puntuación de 24 significa que
+         * La IP estuvo conectada a esta red durante al menos 2 horas
+         * en el último mes (o mínimo 1 hora si está registrado).
+         * La opción sasl-bypass es otra configuración. Significa
+         * que los usuarios que se autentican en los servicios a través de SASL
+         * también se consideran usuarios conocidos.
+         * Usuarios del grupo "known users" (ya sea por reputación
+         * o por SASL) siempre están permitidos por este módulo.
+         */
+		known-users {
+			minimum-reputation-score 24;
+			sasl-bypass yes;
+		}
+
+		/* Los nuevos usuarios son todos los usuarios que no pertenecen al
+         * grupo de usuarios conocidos. Se consideran "nuevos" y en
+         * caso de un gran número de nuevos usuarios que se conectan
+         * están sujetos a limitación de velocidad de conexión.
+         * Por defecto, la configuración es de 20 nuevos usuarios locales por minuto.
+         * y 30 nuevos usuarios globales por minuto.
+         */
+		new-users {
+			local-throttle 20:60;
+			global-throttle 30:60;
+		}
+
+		/* Esta configuración es para cuando este módulo NO este activo.
+         * La configuración predeterminada deshabilitará el módulo cuando:
+         * - El módulo de reputación se ha estado ejecutando durante menos de
+         *   una semana. Si se ejecuta menos de 1 semana, entonces hay
+         * Datos insuficientes para considerar quién es un "known users".
+         * - El servidor acaba de iniciarse (primeros 3 minutos).
+         */
+		disabled-when {
+			reputation-gathering 1w;
+			start-delay 3m;
+		}
+	}
+}
+
+/* Finalmente, es posible que desee tener un MOTD (Mensaje del día), esto puede ser
+ * hecho creando un archivo de texto 'ircd.motd' en su directorio conf /.
+ * Este archivo se mostrará a sus usuarios al conectarse.
+ * Para obtener más información, consulte https://www.unrealircd.org/docs/MOTD_and_Rules
+ */
+
+/*
+ * ¿Problemas o necesita más ayuda?
+ * 1) https://www.unrealircd.org/docs/Main_Page/es
+ * 2) https://www.unrealircd.org/docs/FAQ <- ¡responde el 80% de sus preguntas!
+ * 3) Si aún tiene problemas, puede obtener asistencia:
+ * - Foros: https://forums.unrealircd.org/
+ * - IRC: irc.unrealircd.org (SSL en el puerto 6697) / #unreal-support
+ * Tenga en cuenta que primero le pedimos que lea la documentación y las preguntas frecuentes.
+ */
@@ -860,12 +860,6 @@ help Zline {
 	" Example: ZLINE *@127.0.0.1 Abuse (Adds a permanent Z-Line)";
 	"          ZLINE *@127.0.0.1 2d Abuse (Adds a Z-Line for 2 days)";
 	"          ZLINE -*@127.0.0.1";
-	" -";
-	" Extended server bans (more info at https://www.unrealircd.org/docs/Extended_server_bans)";
-	" Syntax:  ZLINE ~<flag>:<mask> [time] <reason>";
-	" Example: ZLINE ~r:*Stupid_bot_script*";
-	" -";
-	" NOTE: requires the can_zline oper flag";
 }

 help Gline {
@@ -901,8 +895,6 @@ help Gline {
 	" a - Services account name";
 	" r - gecos/realname string";
 	" S - SSL/TLS client certificate fingerprint";
-	" -";
-	" NOTE: requires the can_gkline oper flag";
 }

 help Shun {
@@ -924,8 +916,6 @@ help Shun {
 	" Extended server bans (more info at https://www.unrealircd.org/docs/Extended_server_bans)";
 	" Syntax:  SHUN ~<flag>:<mask> [time] <reason>";
 	" Example: SHUN ~r:*Stupid_bot_script*";
-	" -";
-	" NOTE: requires the can_gkline oper flag";
 }

 help Gzline {
@@ -940,12 +930,6 @@ help Gzline {
 	"          GZLINE -<*@ipmask> (Removes a Global Z-Line for *@ipmask)";
 	" Example: GZLINE *@4.16.200.* 900 Spammers (Adds a 15 min Global Z-Line)";
 	"          GZLINE *@4.16.200.* 1d5h Spammers (Adds a 29 hour Global Z-Line)";
-	" -";
-	" Extended server bans (more info at https://www.unrealircd.org/docs/Extended_server_bans)";
-	" Syntax:  GZLINE ~<flag>:<mask> [time] <reason>";
-	" Example: GZLINE ~r:*Stupid_bot_script*";
-	" -";
-	" NOTE: requires the can_gzline oper flag";
 }

 help Eline {
@@ -1427,7 +1411,7 @@ help Spamfilter {
 	" /spamfilter add -simple p gline 3h Please_go_to_www.viruscan.xx/nicepage/virus=blah Come watch me on my webcam";
 	" /spamfilter add -simple p kill - Please_go_to_www.viruscan.xx/nicepage/virus=blah Come watch me on my webcam";
 	" /spamfilter del -simple p block - - Come watch me on my webcam*";
-	" /spamfilter add -regex cN gzline 1d No_advertising_please /come to irc\..+\..+/";
+	" /spamfilter add -regex cN gzline 1d No_advertising_please come to irc\..+\..+";
 }

 help Tempshun {
@@ -1372,7 +1372,7 @@ help Spamfilter {
 	" /spamfilter add -simple p gline 3h Please_go_to_www.viruscan.xx/nicepage/virus=blah Come watch me on my webcam";
 	" /spamfilter add -simple p kill - Please_go_to_www.viruscan.xx/nicepage/virus=blah Come watch me on my webcam";
 	" /spamfilter del -simple p block - - Come watch me on my webcam*";
-	" /spamfilter add -regex cN gzline 1d No_advertising_please /come to irc\..+\..+/";
+	" /spamfilter add -regex cN gzline 1d No_advertising_please come to irc\..+\..+";
 }

 help Tempshun {
@@ -1278,7 +1278,7 @@ help Spamfilter {
 	" /spamfilter add -simple p gline 3h Please_go_to_www.viruscan.xx/nicepage/virus=blah Come watch me on my webcam";
 	" /spamfilter add -simple p kill - Please_go_to_www.viruscan.xx/nicepage/virus=blah Come watch me on my webcam";
 	" /spamfilter del -simple p block - - Come watch me on my webcam*";
-	" /spamfilter add -regex cN gzline 1d No_advertising_please /come to irc\..+\..+/";
+	" /spamfilter add -regex cN gzline 1d No_advertising_please come to irc\..+\..+";
 }

 help Tempshun {
@@ -1426,7 +1426,7 @@ help Spamfilter {
 	" /spamfilter toevoegen -simple p gline 3h Please_go_to_www.viruscan.xx/nicepage/virus=blah Kom kijken op mijn webcam";
 	" /spamfilter toevoegen -eenvoudige p kill - Please_go_to_www.viruscan.xx/nicepage/virus=blah Kom kijken op mijn webcam";
 	" /spamfilter del -simple p block - - - Kom naar me kijken op mijn webcam*";
-	" /spamfilter voeg -regex cN gzline 1d No_advertising_please /come to irc\..+\..+/";
+	" /spamfilter voeg -regex cN gzline 1d No_advertising_please come to irc\..+\..+";
 }

 help Tempshun {
@@ -1459,7 +1459,7 @@ help Spamfilter {
 	" /spamfilter add -simple p gline 3h Please_go_to_www.viruscan.xx/nicepage/virus=blah Come watch me on my webcam";
 	" /spamfilter add -simple p kill - Please_go_to_www.viruscan.xx/nicepage/virus=blah Come watch me on my webcam";
 	" /spamfilter del -simple p block - - Come watch me on my webcam*";
-	" /spamfilter add -regex cN gzline 1d No_advertising_please /come to irc\..+\..+/";
+	" /spamfilter add -regex cN gzline 1d No_advertising_please come to irc\..+\..+";
 }

 help Tempshun {
@@ -1,7 +1,7 @@
 ##
 ## Bundle of CA Root Certificates
 ##
-## Certificate data from Mozilla as of: Tue Jan 19 04:12:04 2021 GMT
+## Certificate data from Mozilla as of: Thu Sep 30 03:12:05 2021 GMT
 ##
 ## This is a bundle of X.509 certificates of public Certificate Authorities
 ## (CA). These were automatically extracted from Mozilla's root certificates
@@ -14,7 +14,7 @@
 ## Just configure this file as the SSLCACertificateFile.
 ##
 ## Conversion done with mk-ca-bundle.pl version 1.28.
-## SHA256: 3bdc63d1de27058fec943a999a2a8a01fcc6806a611b19221a7727d3d9bbbdfd
+## SHA256: c8f6733d1ff4e6a4769c182971a1234f95ae079247a9c439a13423fe8ba5c24f
 ##


@@ -156,38 +156,6 @@ Rt0vxuBqw8M0Ayx9lt1awg6nCpnBBYurDC/zXDrPbDdVCYfeU0BsWO/8tqtlbgT2G9w84FoVxp7Z
 12yxow+ev+to51byrvLjKzg6CYG1a4XXvi3tPxq3smPi9WIsgtRqAEFQ8TmDn5XpNpaYbg==
 -----END CERTIFICATE-----

-QuoVadis Root CA
-================
-----BEGIN CERTIFICATE-----
-MIIF0DCCBLigAwIBAgIEOrZQizANBgkqhkiG9w0BAQUFADB/MQswCQYDVQQGEwJCTTEZMBcGA1UE
-ChMQUXVvVmFkaXMgTGltaXRlZDElMCMGA1UECxMcUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0
-eTEuMCwGA1UEAxMlUXVvVmFkaXMgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wMTAz
-MTkxODMzMzNaFw0yMTAzMTcxODMzMzNaMH8xCzAJBgNVBAYTAkJNMRkwFwYDVQQKExBRdW9WYWRp
-cyBMaW1pdGVkMSUwIwYDVQQLExxSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MS4wLAYDVQQD
-EyVRdW9WYWRpcyBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEF
-AAOCAQ8AMIIBCgKCAQEAv2G1lVO6V/z68mcLOhrfEYBklbTRvM16z/Ypli4kVEAkOPcahdxYTMuk
-J0KX0J+DisPkBgNbAKVRHnAEdOLB1Dqr1607BxgFjv2DrOpm2RgbaIr1VxqYuvXtdj182d6UajtL
-F8HVj71lODqV0D1VNk7feVcxKh7YWWVJWCCYfqtffp/p1k3sg3Spx2zY7ilKhSoGFPlU5tPaZQeL
-YzcS19Dsw3sgQUSj7cugF+FxZc4dZjH3dgEZyH0DWLaVSR2mEiboxgx24ONmy+pdpibu5cxfvWen
-AScOospUxbF6lR1xHkopigPcakXBpBlebzbNw6Kwt/5cOOJSvPhEQ+aQuwIDAQABo4ICUjCCAk4w
-PQYIKwYBBQUHAQEEMTAvMC0GCCsGAQUFBzABhiFodHRwczovL29jc3AucXVvdmFkaXNvZmZzaG9y
-ZS5jb20wDwYDVR0TAQH/BAUwAwEB/zCCARoGA1UdIASCAREwggENMIIBCQYJKwYBBAG+WAABMIH7
-MIHUBggrBgEFBQcCAjCBxxqBxFJlbGlhbmNlIG9uIHRoZSBRdW9WYWRpcyBSb290IENlcnRpZmlj
-YXRlIGJ5IGFueSBwYXJ0eSBhc3N1bWVzIGFjY2VwdGFuY2Ugb2YgdGhlIHRoZW4gYXBwbGljYWJs
-ZSBzdGFuZGFyZCB0ZXJtcyBhbmQgY29uZGl0aW9ucyBvZiB1c2UsIGNlcnRpZmljYXRpb24gcHJh
-Y3RpY2VzLCBhbmQgdGhlIFF1b1ZhZGlzIENlcnRpZmljYXRlIFBvbGljeS4wIgYIKwYBBQUHAgEW
-Fmh0dHA6Ly93d3cucXVvdmFkaXMuYm0wHQYDVR0OBBYEFItLbe3TKbkGGew5Oanwl4Rqy+/fMIGu
-BgNVHSMEgaYwgaOAFItLbe3TKbkGGew5Oanwl4Rqy+/foYGEpIGBMH8xCzAJBgNVBAYTAkJNMRkw
-FwYDVQQKExBRdW9WYWRpcyBMaW1pdGVkMSUwIwYDVQQLExxSb290IENlcnRpZmljYXRpb24gQXV0
-aG9yaXR5MS4wLAYDVQQDEyVRdW9WYWRpcyBSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5ggQ6
-tlCLMA4GA1UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEAitQUtf70mpKnGdSkfnIYj9lo
-fFIk3WdvOXrEql494liwTXCYhGHoG+NpGA7O+0dQoE7/8CQfvbLO9Sf87C9TqnN7Az10buYWnuul
-LsS/VidQK2K6vkscPFVcQR0kvoIgR13VRH56FmjffU1RcHhXHTMe/QKZnAzNCgVPx7uOpHX6Sm2x
-gI4JVrmcGmD+XcHXetwReNDWXcG31a0ymQM6isxUJTkxgXsTIlG6Rmyhu576BGxJJnSP0nPrzDCi
-5upZIof4l/UO/erMkqQWxFIY6iHOsfHmhIHluqmGKPJDWl0Snawe2ajlCmqnf6CHKc/yiU3U7MXi
-5nrQNiOKSnQ2+Q==
-----END CERTIFICATE-----
-
 QuoVadis Root CA 2
 ==================
 -----BEGIN CERTIFICATE-----
@@ -275,26 +243,6 @@ s58+OmJYxUmtYg5xpTKqL8aJdkNAExNnPaJUJRDL8Try2frbSVa7pv6nQTXD4IhhyYjH3zYQIphZ
 FL39vmwLAw==
 -----END CERTIFICATE-----

-Sonera Class 2 Root CA
-======================
-----BEGIN CERTIFICATE-----
-MIIDIDCCAgigAwIBAgIBHTANBgkqhkiG9w0BAQUFADA5MQswCQYDVQQGEwJGSTEPMA0GA1UEChMG
-U29uZXJhMRkwFwYDVQQDExBTb25lcmEgQ2xhc3MyIENBMB4XDTAxMDQwNjA3Mjk0MFoXDTIxMDQw
-NjA3Mjk0MFowOTELMAkGA1UEBhMCRkkxDzANBgNVBAoTBlNvbmVyYTEZMBcGA1UEAxMQU29uZXJh
-IENsYXNzMiBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJAXSjWdyvANlsdE+hY3
-/Ei9vX+ALTU74W+oZ6m/AxxNjG8yR9VBaKQTBME1DJqEQ/xcHf+Js+gXGM2RX/uJ4+q/Tl18GybT
-dXnt5oTjV+WtKcT0OijnpXuENmmz/V52vaMtmdOQTiMofRhj8VQ7Jp12W5dCsv+u8E7s3TmVToMG
-f+dJQMjFAbJUWmYdPfz56TwKnoG4cPABi+QjVHzIrviQHgCWctRUz2EjvOr7nQKV0ba5cTppCD8P
-tOFCx4j1P5iop7oc4HFx71hXgVB6XGt0Rg6DA5jDjqhu8nYybieDwnPz3BjotJPqdURrBGAgcVeH
-nfO+oJAjPYok4doh28MCAwEAAaMzMDEwDwYDVR0TAQH/BAUwAwEB/zARBgNVHQ4ECgQISqCqWITT
-XjwwCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEBBQUAA4IBAQBazof5FnIVV0sd2ZvnoiYw7JNn39Yt
-0jSv9zilzqsWuasvfDXLrNAPtEwr/IDva4yRXzZ299uzGxnq9LIR/WFxRL8oszodv7ND6J+/3DEI
-cbCdjdY0RzKQxmUk96BKfARzjzlvF4xytb1LyHr4e4PDKE6cCepnP7JnBBvDFNr450kkkdAdavph
-Oe9r5yF1BgfYErQhIHBCcYHaPJo2vqZbDWpsmh+Re/n570K6Tk6ezAyNlNzZRZxe7EJQY670XcSx
-EtzKO6gunRRaBXW37Ndj4ro1tgQIkejanZz2ZrUYrAqmVCY0M9IbwdR/GjqOC6oybtv8TyWf2TLH
-llpwrN9M
-----END CERTIFICATE-----
-
 XRamp Global CA Root
 ====================
 -----BEGIN CERTIFICATE-----
@@ -433,26 +381,6 @@ mNEVX58Svnw2Yzi9RKR/5CYrCsSXaQ3pjOLAEFe4yHYSkVXySGnYvCoCWw9E1CAx2/S6cCZdkGCe
 vEsXCS+0yx5DaMkHJ8HSXPfqIbloEpw8nL+e/IBcm2PN7EeqJSdnoDfzAIJ9VNep+OkuE6N36B9K
 -----END CERTIFICATE-----

-DST Root CA X3
-==============
-----BEGIN CERTIFICATE-----
-MIIDSjCCAjKgAwIBAgIQRK+wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA/MSQwIgYDVQQK
-ExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMTDkRTVCBSb290IENBIFgzMB4X
-DTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVowPzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1
-cmUgVHJ1c3QgQ28uMRcwFQYDVQQDEw5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQAD
-ggEPADCCAQoCggEBAN+v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi+DoM3ZJKuM/IUmT
-rE4Orz5Iy2Xu/NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEqOLl5CjH9
-UL2AZd+3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9bxiqKqy69cK3FCxolkHRy
-xXtqqzTWMIn/5WgTe1QLyNau7Fqckh49ZLOMxt+/yUFw7BZy1SbsOFU5Q9D8/RhcQPGX69Wam40d
-utolucbY38EVAjqr2m7xPi71XAicPNaDaeQQmxkqtilX4+U9m5/wAl0CAwEAAaNCMEAwDwYDVR0T
-AQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62+FLkHX/xBVghYkQ
-MA0GCSqGSIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or+Dxz9LwwmglSBd49lZRNI+DT69ikug
-dB/OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX+5v3gTt23ADq1cEmv8uXrAvHRAosZy5Q6XkjE
-GB5YGV8eAlrwDPGxrancWYaLbumR9YbK+rlmM6pZW87ipxZzR8srzJmwN0jP41ZL9c8PDHIyh8bw
-RLtTcm1D9SZImlJnt1ir/md2cXjbDaJWFBM5JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubS
-fZGL+T0yjWW06XyxV3bqxbYoOb8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ
-----END CERTIFICATE-----
-
 SwissSign Gold CA - G2
 ======================
 -----BEGIN CERTIFICATE-----
@@ -718,51 +646,6 @@ vBTjD4au8as+x6AJzKNI0eDbZOeStc+vckNwi/nDhDwTqn6Sm1dTk/pwwpEOMfmbZ13pljheX7Nz
 TogVZ96edhBiIL5VaZVDADlN9u6wWk5JRFRYX0KD
 -----END CERTIFICATE-----

-GeoTrust Primary Certification Authority - G2
-=============================================
-----BEGIN CERTIFICATE-----
-MIICrjCCAjWgAwIBAgIQPLL0SAoA4v7rJDteYD7DazAKBggqhkjOPQQDAzCBmDELMAkGA1UEBhMC
-VVMxFjAUBgNVBAoTDUdlb1RydXN0IEluYy4xOTA3BgNVBAsTMChjKSAyMDA3IEdlb1RydXN0IElu
-Yy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTE2MDQGA1UEAxMtR2VvVHJ1c3QgUHJpbWFyeSBD
-ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEcyMB4XDTA3MTEwNTAwMDAwMFoXDTM4MDExODIzNTk1
-OVowgZgxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMTkwNwYDVQQLEzAoYykg
-MjAwNyBHZW9UcnVzdCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxNjA0BgNVBAMTLUdl
-b1RydXN0IFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMjB2MBAGByqGSM49AgEG
-BSuBBAAiA2IABBWx6P0DFUPlrOuHNxFi79KDNlJ9RVcLSo17VDs6bl8VAsBQps8lL33KSLjHUGMc
-KiEIfJo22Av+0SbFWDEwKCXzXV2juLaltJLtbCyf691DiaI8S0iRHVDsJt/WYC69IaNCMEAwDwYD
-VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFBVfNVdRVfslsq0DafwBo/q+
-EVXVMAoGCCqGSM49BAMDA2cAMGQCMGSWWaboCd6LuvpaiIjwH5HTRqjySkwCY/tsXzjbLkGTqQ7m
-ndwxHLKgpxgceeHHNgIwOlavmnRs9vuD4DPTCF+hnMJbn0bWtsuRBmOiBuczrD6ogRLQy7rQkgu2
-npaqBA+K
-----END CERTIFICATE-----
-
-VeriSign Universal Root Certification Authority
-===============================================
-----BEGIN CERTIFICATE-----
-MIIEuTCCA6GgAwIBAgIQQBrEZCGzEyEDDrvkEhrFHTANBgkqhkiG9w0BAQsFADCBvTELMAkGA1UE
-BhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBO
-ZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwOCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVk
-IHVzZSBvbmx5MTgwNgYDVQQDEy9WZXJpU2lnbiBVbml2ZXJzYWwgUm9vdCBDZXJ0aWZpY2F0aW9u
-IEF1dGhvcml0eTAeFw0wODA0MDIwMDAwMDBaFw0zNzEyMDEyMzU5NTlaMIG9MQswCQYDVQQGEwJV
-UzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdv
-cmsxOjA4BgNVBAsTMShjKSAyMDA4IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNl
-IG9ubHkxODA2BgNVBAMTL1ZlcmlTaWduIFVuaXZlcnNhbCBSb290IENlcnRpZmljYXRpb24gQXV0
-aG9yaXR5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2E3XrEBNNti1xWb/1hajCMj
-1mCOkdeQmIN65lgZOIzF9uVkhbSicfvtvbnazU0AtMgtc6XHaXGVHzk8skQHnOgO+k1KxCHfKWGP
-MiJhgsWHH26MfF8WIFFE0XBPV+rjHOPMee5Y2A7Cs0WTwCznmhcrewA3ekEzeOEz4vMQGn+HLL72
-9fdC4uW/h2KJXwBL38Xd5HVEMkE6HnFuacsLdUYI0crSK5XQz/u5QGtkjFdN/BMReYTtXlT2NJ8I
-AfMQJQYXStrxHXpma5hgZqTZ79IugvHw7wnqRMkVauIDbjPTrJ9VAMf2CGqUuV/c4DPxhGD5WycR
-tPwW8rtWaoAljQIDAQABo4GyMIGvMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMG0G
-CCsGAQUFBwEMBGEwX6FdoFswWTBXMFUWCWltYWdlL2dpZjAhMB8wBwYFKw4DAhoEFI/l0xqGrI2O
-a8PPgGrUSBgsexkuMCUWI2h0dHA6Ly9sb2dvLnZlcmlzaWduLmNvbS92c2xvZ28uZ2lmMB0GA1Ud
-DgQWBBS2d/ppSEefUxLVwuoHMnYH0ZcHGTANBgkqhkiG9w0BAQsFAAOCAQEASvj4sAPmLGd75JR3
-Y8xuTPl9Dg3cyLk1uXBPY/ok+myDjEedO2Pzmvl2MpWRsXe8rJq+seQxIcaBlVZaDrHC1LGmWazx
-Y8u4TB1ZkErvkBYoH1quEPuBUDgMbMzxPcP1Y+Oz4yHJJDnp/RVmRvQbEdBNc6N9Rvk97ahfYtTx
-P/jgdFcrGJ2BtMQo2pSXpXDrrB2+BxHw1dvd5Yzw1TKwg+ZX4o+/vqGqvz0dtdQ46tewXDpPaj+P
-wGZsY6rp2aQW9IHRlRQOfc2VNNnSj3BzgXucfr2YYdhFh5iQxeuGMMY1v/D/w1WIg0vvBZIGcfK4
-mJO37M2CYfE45k+XmCpajQ==
-----END CERTIFICATE-----
-
 NetLock Arany (Class Gold) Főtanúsítvány
 ========================================
 -----BEGIN CERTIFICATE-----
@@ -938,82 +821,6 @@ Q0iy2+tzJOeRf1SktoA+naM8THLCV8Sg1Mw4J87VBp6iSNnpn86CcDaTmjvfliHjWbcM2pE38P1Z
 WrOZyGlsQyYBNWNgVYkDOnXYukrZVP/u3oDYLdE41V4tC5h9Pmzb/CaIxw==
 -----END CERTIFICATE-----

-Chambers of Commerce Root - 2008
-================================
-----BEGIN CERTIFICATE-----
-MIIHTzCCBTegAwIBAgIJAKPaQn6ksa7aMA0GCSqGSIb3DQEBBQUAMIGuMQswCQYDVQQGEwJFVTFD
-MEEGA1UEBxM6TWFkcmlkIChzZWUgY3VycmVudCBhZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNv
-bS9hZGRyZXNzKTESMBAGA1UEBRMJQTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMu
-QS4xKTAnBgNVBAMTIENoYW1iZXJzIG9mIENvbW1lcmNlIFJvb3QgLSAyMDA4MB4XDTA4MDgwMTEy
-Mjk1MFoXDTM4MDczMTEyMjk1MFowga4xCzAJBgNVBAYTAkVVMUMwQQYDVQQHEzpNYWRyaWQgKHNl
-ZSBjdXJyZW50IGFkZHJlc3MgYXQgd3d3LmNhbWVyZmlybWEuY29tL2FkZHJlc3MpMRIwEAYDVQQF
-EwlBODI3NDMyODcxGzAZBgNVBAoTEkFDIENhbWVyZmlybWEgUy5BLjEpMCcGA1UEAxMgQ2hhbWJl
-cnMgb2YgQ29tbWVyY2UgUm9vdCAtIDIwMDgwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
-AQCvAMtwNyuAWko6bHiUfaN/Gh/2NdW928sNRHI+JrKQUrpjOyhYb6WzbZSm891kDFX29ufyIiKA
-XuFixrYp4YFs8r/lfTJqVKAyGVn+H4vXPWCGhSRv4xGzdz4gljUha7MI2XAuZPeEklPWDrCQiorj
-h40G072QDuKZoRuGDtqaCrsLYVAGUvGef3bsyw/QHg3PmTA9HMRFEFis1tPo1+XqxQEHd9ZR5gN/
-ikilTWh1uem8nk4ZcfUyS5xtYBkL+8ydddy/Js2Pk3g5eXNeJQ7KXOt3EgfLZEFHcpOrUMPrCXZk
-NNI5t3YRCQ12RcSprj1qr7V9ZS+UWBDsXHyvfuK2GNnQm05aSd+pZgvMPMZ4fKecHePOjlO+Bd5g
-D2vlGts/4+EhySnB8esHnFIbAURRPHsl18TlUlRdJQfKFiC4reRB7noI/plvg6aRArBsNlVq5331
-lubKgdaX8ZSD6e2wsWsSaR6s+12pxZjptFtYer49okQ6Y1nUCyXeG0+95QGezdIp1Z8XGQpvvwyQ
-0wlf2eOKNcx5Wk0ZN5K3xMGtr/R5JJqyAQuxr1yW84Ay+1w9mPGgP0revq+ULtlVmhduYJ1jbLhj
-ya6BXBg14JC7vjxPNyK5fuvPnnchpj04gftI2jE9K+OJ9dC1vX7gUMQSibMjmhAxhduub+84Mxh2
-EQIDAQABo4IBbDCCAWgwEgYDVR0TAQH/BAgwBgEB/wIBDDAdBgNVHQ4EFgQU+SSsD7K1+HnA+mCI
-G8TZTQKeFxkwgeMGA1UdIwSB2zCB2IAU+SSsD7K1+HnA+mCIG8TZTQKeFxmhgbSkgbEwga4xCzAJ
-BgNVBAYTAkVVMUMwQQYDVQQHEzpNYWRyaWQgKHNlZSBjdXJyZW50IGFkZHJlc3MgYXQgd3d3LmNh
-bWVyZmlybWEuY29tL2FkZHJlc3MpMRIwEAYDVQQFEwlBODI3NDMyODcxGzAZBgNVBAoTEkFDIENh
-bWVyZmlybWEgUy5BLjEpMCcGA1UEAxMgQ2hhbWJlcnMgb2YgQ29tbWVyY2UgUm9vdCAtIDIwMDiC
-CQCj2kJ+pLGu2jAOBgNVHQ8BAf8EBAMCAQYwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUH
-AgEWHGh0dHA6Ly9wb2xpY3kuY2FtZXJmaXJtYS5jb20wDQYJKoZIhvcNAQEFBQADggIBAJASryI1
-wqM58C7e6bXpeHxIvj99RZJe6dqxGfwWPJ+0W2aeaufDuV2I6A+tzyMP3iU6XsxPpcG1Lawk0lgH
-3qLPaYRgM+gQDROpI9CF5Y57pp49chNyM/WqfcZjHwj0/gF/JM8rLFQJ3uIrbZLGOU8W6jx+ekbU
-RWpGqOt1glanq6B8aBMz9p0w8G8nOSQjKpD9kCk18pPfNKXG9/jvjA9iSnyu0/VU+I22mlaHFoI6
-M6taIgj3grrqLuBHmrS1RaMFO9ncLkVAO+rcf+g769HsJtg1pDDFOqxXnrN2pSB7+R5KBWIBpih1
-YJeSDW4+TTdDDZIVnBgizVGZoCkaPF+KMjNbMMeJL0eYD6MDxvbxrN8y8NmBGuScvfaAFPDRLLmF
-9dijscilIeUcE5fuDr3fKanvNFNb0+RqE4QGtjICxFKuItLcsiFCGtpA8CnJ7AoMXOLQusxI0zcK
-zBIKinmwPQN/aUv0NCB9szTqjktk9T79syNnFQ0EuPAtwQlRPLJsFfClI9eDdOTlLsn+mCdCxqvG
-nrDQWzilm1DefhiYtUU79nm06PcaewaD+9CL2rvHvRirCG88gGtAPxkZumWK5r7VXNM21+9AUiRg
-OGcEMeyP84LG3rlV8zsxkVrctQgVrXYlCg17LofiDKYGvCYQbTed7N14jHyAxfDZd0jQ
-----END CERTIFICATE-----
-
-Global Chambersign Root - 2008
-==============================
-----BEGIN CERTIFICATE-----
-MIIHSTCCBTGgAwIBAgIJAMnN0+nVfSPOMA0GCSqGSIb3DQEBBQUAMIGsMQswCQYDVQQGEwJFVTFD
-MEEGA1UEBxM6TWFkcmlkIChzZWUgY3VycmVudCBhZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNv
-bS9hZGRyZXNzKTESMBAGA1UEBRMJQTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMu
-QS4xJzAlBgNVBAMTHkdsb2JhbCBDaGFtYmVyc2lnbiBSb290IC0gMjAwODAeFw0wODA4MDExMjMx
-NDBaFw0zODA3MzExMjMxNDBaMIGsMQswCQYDVQQGEwJFVTFDMEEGA1UEBxM6TWFkcmlkIChzZWUg
-Y3VycmVudCBhZGRyZXNzIGF0IHd3dy5jYW1lcmZpcm1hLmNvbS9hZGRyZXNzKTESMBAGA1UEBRMJ
-QTgyNzQzMjg3MRswGQYDVQQKExJBQyBDYW1lcmZpcm1hIFMuQS4xJzAlBgNVBAMTHkdsb2JhbCBD
-aGFtYmVyc2lnbiBSb290IC0gMjAwODCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMDf
-VtPkOpt2RbQT2//BthmLN0EYlVJH6xedKYiONWwGMi5HYvNJBL99RDaxccy9Wglz1dmFRP+RVyXf
-XjaOcNFccUMd2drvXNL7G706tcuto8xEpw2uIRU/uXpbknXYpBI4iRmKt4DS4jJvVpyR1ogQC7N0
-ZJJ0YPP2zxhPYLIj0Mc7zmFLmY/CDNBAspjcDahOo7kKrmCgrUVSY7pmvWjg+b4aqIG7HkF4ddPB
-/gBVsIdU6CeQNR1MM62X/JcumIS/LMmjv9GYERTtY/jKmIhYF5ntRQOXfjyGHoiMvvKRhI9lNNgA
-TH23MRdaKXoKGCQwoze1eqkBfSbW+Q6OWfH9GzO1KTsXO0G2Id3UwD2ln58fQ1DJu7xsepeY7s2M
-H/ucUa6LcL0nn3HAa6x9kGbo1106DbDVwo3VyJ2dwW3Q0L9R5OP4wzg2rtandeavhENdk5IMagfe
-Ox2YItaswTXbo6Al/3K1dh3ebeksZixShNBFks4c5eUzHdwHU1SjqoI7mjcv3N2gZOnm3b2u/GSF
-HTynyQbehP9r6GsaPMWis0L7iwk+XwhSx2LE1AVxv8Rk5Pihg+g+EpuoHtQ2TS9x9o0o9oOpE9Jh
-wZG7SMA0j0GMS0zbaRL/UJScIINZc+18ofLx/d33SdNDWKBWY8o9PeU1VlnpDsogzCtLkykPAgMB
-AAGjggFqMIIBZjASBgNVHRMBAf8ECDAGAQH/AgEMMB0GA1UdDgQWBBS5CcqcHtvTbDprru1U8VuT
-BjUuXjCB4QYDVR0jBIHZMIHWgBS5CcqcHtvTbDprru1U8VuTBjUuXqGBsqSBrzCBrDELMAkGA1UE
-BhMCRVUxQzBBBgNVBAcTOk1hZHJpZCAoc2VlIGN1cnJlbnQgYWRkcmVzcyBhdCB3d3cuY2FtZXJm
-aXJtYS5jb20vYWRkcmVzcykxEjAQBgNVBAUTCUE4Mjc0MzI4NzEbMBkGA1UEChMSQUMgQ2FtZXJm
-aXJtYSBTLkEuMScwJQYDVQQDEx5HbG9iYWwgQ2hhbWJlcnNpZ24gUm9vdCAtIDIwMDiCCQDJzdPp
-1X0jzjAOBgNVHQ8BAf8EBAMCAQYwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0
-dHA6Ly9wb2xpY3kuY2FtZXJmaXJtYS5jb20wDQYJKoZIhvcNAQEFBQADggIBAICIf3DekijZBZRG
-/5BXqfEv3xoNa/p8DhxJJHkn2EaqbylZUohwEurdPfWbU1Rv4WCiqAm57OtZfMY18dwY6fFn5a+6
-ReAJ3spED8IXDneRRXozX1+WLGiLwUePmJs9wOzL9dWCkoQ10b42OFZyMVtHLaoXpGNR6woBrX/s
-dZ7LoR/xfxKxueRkf2fWIyr0uDldmOghp+G9PUIadJpwr2hsUF1Jz//7Dl3mLEfXgTpZALVza2Mg
-9jFFCDkO9HB+QHBaP9BrQql0PSgvAm11cpUJjUhjxsYjV5KTXjXBjfkK9yydYhz2rXzdpjEetrHH
-foUm+qRqtdpjMNHvkzeyZi99Bffnt0uYlDXA2TopwZ2yUDMdSqlapskD7+3056huirRXhOukP9Du
-qqqHW2Pok+JrqNS4cnhrG+055F3Lm6qH1U9OAP7Zap88MQ8oAgF9mOinsKJknnn4SPIVqczmyETr
-P3iZ8ntxPjzxmKfFGBI/5rsoM0LpRQp8bfKGeS/Fghl9CYl8slR2iK7ewfPM4W7bMdaTrpmg7yVq
-c5iJWzouE4gev8CSlDQb4ye3ix5vQv/n6TebUB0tovkC7stYWDpxvGjjqsGvHCgfotwjZT+B6q6Z
-09gwzxMNTxXJhLynSC34MCN32EZLeW32jO06f2ARePTpm67VVMB0gNELQp/B
-----END CERTIFICATE-----
-
 Go Daddy Root Certificate Authority - G2
 ========================================
 -----BEGIN CERTIFICATE-----
@@ -1315,27 +1122,6 @@ OR/qnuOf0GZvBeyqdn6/axag67XH/JJULysRJyU3eExRarDzzFhdFPFqSBX/wge2sY0PjlxQRrM9
 vwGYT7JZVEc+NHt4bVaTLnPqZih4zR0Uv6CPLy64Lo7yFIrM6bV8+2ydDKXhlg==
 -----END CERTIFICATE-----

-Trustis FPS Root CA
-===================
-----BEGIN CERTIFICATE-----
-MIIDZzCCAk+gAwIBAgIQGx+ttiD5JNM2a/fH8YygWTANBgkqhkiG9w0BAQUFADBFMQswCQYDVQQG
-EwJHQjEYMBYGA1UEChMPVHJ1c3RpcyBMaW1pdGVkMRwwGgYDVQQLExNUcnVzdGlzIEZQUyBSb290
-IENBMB4XDTAzMTIyMzEyMTQwNloXDTI0MDEyMTExMzY1NFowRTELMAkGA1UEBhMCR0IxGDAWBgNV
-BAoTD1RydXN0aXMgTGltaXRlZDEcMBoGA1UECxMTVHJ1c3RpcyBGUFMgUm9vdCBDQTCCASIwDQYJ
-KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMVQe547NdDfxIzNjpvto8A2mfRC6qc+gIMPpqdZh8mQ
-RUN+AOqGeSoDvT03mYlmt+WKVoaTnGhLaASMk5MCPjDSNzoiYYkchU59j9WvezX2fihHiTHcDnlk
-H5nSW7r+f2C/revnPDgpai/lkQtV/+xvWNUtyd5MZnGPDNcE2gfmHhjjvSkCqPoc4Vu5g6hBSLwa
-cY3nYuUtsuvffM/bq1rKMfFMIvMFE/eC+XN5DL7XSxzA0RU8k0Fk0ea+IxciAIleH2ulrG6nS4zt
-o3Lmr2NNL4XSFDWaLk6M6jKYKIahkQlBOrTh4/L68MkKokHdqeMDx4gVOxzUGpTXn2RZEm0CAwEA
-AaNTMFEwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBS6+nEleYtXQSUhhgtx67JkDoshZzAd
-BgNVHQ4EFgQUuvpxJXmLV0ElIYYLceuyZA6LIWcwDQYJKoZIhvcNAQEFBQADggEBAH5Y//01GX2c
-GE+esCu8jowU/yyg2kdbw++BLa8F6nRIW/M+TgfHbcWzk88iNVy2P3UnXwmWzaD+vkAMXBJV+JOC
-yinpXj9WV4s4NvdFGkwozZ5BuO1WTISkQMi4sKUraXAEasP41BIy+Q7DsdwyhEQsb8tGD+pmQQ9P
-8Vilpg0ND2HepZ5dfWWhPBfnqFVO76DH7cZEf1T1o+CP8HxVIo8ptoGj4W1OLBuAZ+ytIJ8MYmHV
-l/9D7S3B2l0pKoU/rGXuhg8FjZBf3+6f9L/uHfuY5H+QK4R4EA5sSVPvFVtlRkpdr7r7OnIdzfYl
-iB6XzCGcKQENZetX2fNXlrtIzYE=
-----END CERTIFICATE-----
-
 Buypass Class 2 Root CA
 =======================
 -----BEGIN CERTIFICATE-----
@@ -1980,36 +1766,6 @@ uglB4Zf4+/2a4n0Sye18ZNPLBSWLVtmg515dTguDnFt2KaAJJiFqYgIwcdK1j1zqO+F4CYWodZI7
 yFz9SO8NdCKoCOJuxUnOxwy8p2Fp8fc74SrL+SvzZpA3
 -----END CERTIFICATE-----

-Staat der Nederlanden Root CA - G3
-==================================
-----BEGIN CERTIFICATE-----
-MIIFdDCCA1ygAwIBAgIEAJiiOTANBgkqhkiG9w0BAQsFADBaMQswCQYDVQQGEwJOTDEeMBwGA1UE
-CgwVU3RhYXQgZGVyIE5lZGVybGFuZGVuMSswKQYDVQQDDCJTdGFhdCBkZXIgTmVkZXJsYW5kZW4g
-Um9vdCBDQSAtIEczMB4XDTEzMTExNDExMjg0MloXDTI4MTExMzIzMDAwMFowWjELMAkGA1UEBhMC
-TkwxHjAcBgNVBAoMFVN0YWF0IGRlciBOZWRlcmxhbmRlbjErMCkGA1UEAwwiU3RhYXQgZGVyIE5l
-ZGVybGFuZGVuIFJvb3QgQ0EgLSBHMzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL4y
-olQPcPssXFnrbMSkUeiFKrPMSjTysF/zDsccPVMeiAho2G89rcKezIJnByeHaHE6n3WWIkYFsO2t
-x1ueKt6c/DrGlaf1F2cY5y9JCAxcz+bMNO14+1Cx3Gsy8KL+tjzk7FqXxz8ecAgwoNzFs21v0IJy
-EavSgWhZghe3eJJg+szeP4TrjTgzkApyI/o1zCZxMdFyKJLZWyNtZrVtB0LrpjPOktvA9mxjeM3K
-Tj215VKb8b475lRgsGYeCasH/lSJEULR9yS6YHgamPfJEf0WwTUaVHXvQ9Plrk7O53vDxk5hUUur
-mkVLoR9BvUhTFXFkC4az5S6+zqQbwSmEorXLCCN2QyIkHxcE1G6cxvx/K2Ya7Irl1s9N9WMJtxU5
-1nus6+N86U78dULI7ViVDAZCopz35HCz33JvWjdAidiFpNfxC95DGdRKWCyMijmev4SH8RY7Ngzp
-07TKbBlBUgmhHbBqv4LvcFEhMtwFdozL92TkA1CvjJFnq8Xy7ljY3r735zHPbMk7ccHViLVlvMDo
-FxcHErVc0qsgk7TmgoNwNsXNo42ti+yjwUOH5kPiNL6VizXtBznaqB16nzaeErAMZRKQFWDZJkBE
-41ZgpRDUajz9QdwOWke275dhdU/Z/seyHdTtXUmzqWrLZoQT1Vyg3N9udwbRcXXIV2+vD3dbAgMB
-AAGjQjBAMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRUrfrHkleu
-yjWcLhL75LpdINyUVzANBgkqhkiG9w0BAQsFAAOCAgEAMJmdBTLIXg47mAE6iqTnB/d6+Oea31BD
-U5cqPco8R5gu4RV78ZLzYdqQJRZlwJ9UXQ4DO1t3ApyEtg2YXzTdO2PCwyiBwpwpLiniyMMB8jPq
-KqrMCQj3ZWfGzd/TtiunvczRDnBfuCPRy5FOCvTIeuXZYzbB1N/8Ipf3YF3qKS9Ysr1YvY2WTxB1
-v0h7PVGHoTx0IsL8B3+A3MSs/mrBcDCw6Y5p4ixpgZQJut3+TcCDjJRYwEYgr5wfAvg1VUkvRtTA
-8KCWAg8zxXHzniN9lLf9OtMJgwYh/WA9rjLA0u6NpvDntIJ8CsxwyXmA+P5M9zWEGYox+wrZ13+b
-8KKaa8MFSu1BYBQw0aoRQm7TIwIEC8Zl3d1Sd9qBa7Ko+gE4uZbqKmxnl4mUnrzhVNXkanjvSr0r
-mj1AfsbAddJu+2gw7OyLnflJNZoaLNmzlTnVHpL3prllL+U9bTpITAjc5CgSKL59NVzq4BZ+Extq
-1z7XnvwtdbLBFNUjA9tbbws+eC8N3jONFrdI54OagQ97wUNNVQQXOEpR1VmiiXTTn74eS9fGbbeI
-JG9gkaSChVtWQbzQRKtqE77RLFi3EjNYsjdj3BP1lB0/QFH1T/U67cjF68IeHRaVesd+QnGTbksV
-tzDfqu1XhUisHWrdOWnk4Xl4vs4Fv6EM94B7IWcnMFk=
-----END CERTIFICATE-----
-
 Staat der Nederlanden EV Root CA
 ================================
 -----BEGIN CERTIFICATE-----
@@ -3226,3 +2982,173 @@ qqFJu3FS8r/2/yehNq+4tneI3TqkbZs0kNwUXTC/t+sX5Ie3cdCh13cV1ELX8vMxmV2b3RZtP+oG
 I/hGoiLtk/bdmuYqh7GYVPEi92tF4+KOdh2ajcQGjTa3FPOdVGm3jjzVpG2Tgbet9r1ke8LJaDmg
 kpzNNIaRkPpkUZ3+/uul9XXeifdy
 -----END CERTIFICATE-----
+
+AC RAIZ FNMT-RCM SERVIDORES SEGUROS
+===================================
+-----BEGIN CERTIFICATE-----
+MIICbjCCAfOgAwIBAgIQYvYybOXE42hcG2LdnC6dlTAKBggqhkjOPQQDAzB4MQswCQYDVQQGEwJF
+UzERMA8GA1UECgwIRk5NVC1SQ00xDjAMBgNVBAsMBUNlcmVzMRgwFgYDVQRhDA9WQVRFUy1RMjgy
+NjAwNEoxLDAqBgNVBAMMI0FDIFJBSVogRk5NVC1SQ00gU0VSVklET1JFUyBTRUdVUk9TMB4XDTE4
+MTIyMDA5MzczM1oXDTQzMTIyMDA5MzczM1oweDELMAkGA1UEBhMCRVMxETAPBgNVBAoMCEZOTVQt
+UkNNMQ4wDAYDVQQLDAVDZXJlczEYMBYGA1UEYQwPVkFURVMtUTI4MjYwMDRKMSwwKgYDVQQDDCNB
+QyBSQUlaIEZOTVQtUkNNIFNFUlZJRE9SRVMgU0VHVVJPUzB2MBAGByqGSM49AgEGBSuBBAAiA2IA
+BPa6V1PIyqvfNkpSIeSX0oNnnvBlUdBeh8dHsVnyV0ebAAKTRBdp20LHsbI6GA60XYyzZl2hNPk2
+LEnb80b8s0RpRBNm/dfF/a82Tc4DTQdxz69qBdKiQ1oKUm8BA06Oi6NCMEAwDwYDVR0TAQH/BAUw
+AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFAG5L++/EYZg8k/QQW6rcx/n0m5JMAoGCCqG
+SM49BAMDA2kAMGYCMQCuSuMrQMN0EfKVrRYj3k4MGuZdpSRea0R7/DjiT8ucRRcRTBQnJlU5dUoD
+zBOQn5ICMQD6SmxgiHPz7riYYqnOK8LZiqZwMR2vsJRM60/G49HzYqc8/5MuB1xJAWdpEgJyv+c=
+-----END CERTIFICATE-----
+
+GlobalSign Root R46
+===================
+-----BEGIN CERTIFICATE-----
+MIIFWjCCA0KgAwIBAgISEdK7udcjGJ5AXwqdLdDfJWfRMA0GCSqGSIb3DQEBDAUAMEYxCzAJBgNV
+BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYDVQQDExNHbG9iYWxTaWduIFJv
+b3QgUjQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMyMDAwMDAwMFowRjELMAkGA1UEBhMCQkUxGTAX
+BgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExHDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBSNDYwggIi
+MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCsrHQy6LNl5brtQyYdpokNRbopiLKkHWPd08Es
+CVeJOaFV6Wc0dwxu5FUdUiXSE2te4R2pt32JMl8Nnp8semNgQB+msLZ4j5lUlghYruQGvGIFAha/
+r6gjA7aUD7xubMLL1aa7DOn2wQL7Id5m3RerdELv8HQvJfTqa1VbkNud316HCkD7rRlr+/fKYIje
+2sGP1q7Vf9Q8g+7XFkyDRTNrJ9CG0Bwta/OrffGFqfUo0q3v84RLHIf8E6M6cqJaESvWJ3En7YEt
+bWaBkoe0G1h6zD8K+kZPTXhc+CtI4wSEy132tGqzZfxCnlEmIyDLPRT5ge1lFgBPGmSXZgjPjHvj
+K8Cd+RTyG/FWaha/LIWFzXg4mutCagI0GIMXTpRW+LaCtfOW3T3zvn8gdz57GSNrLNRyc0NXfeD4
+12lPFzYE+cCQYDdF3uYM2HSNrpyibXRdQr4G9dlkbgIQrImwTDsHTUB+JMWKmIJ5jqSngiCNI/on
+ccnfxkF0oE32kRbcRoxfKWMxWXEM2G/CtjJ9++ZdU6Z+Ffy7dXxd7Pj2Fxzsx2sZy/N78CsHpdls
+eVR2bJ0cpm4O6XkMqCNqo98bMDGfsVR7/mrLZqrcZdCinkqaByFrgY/bxFn63iLABJzjqls2k+g9
+vXqhnQt2sQvHnf3PmKgGwvgqo6GDoLclcqUC4wIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAYYwDwYD
+VR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA1yrc4GHqMywptWU4jaWSf8FmSwwDQYJKoZIhvcNAQEM
+BQADggIBAHx47PYCLLtbfpIrXTncvtgdokIzTfnvpCo7RGkerNlFo048p9gkUbJUHJNOxO97k4Vg
+JuoJSOD1u8fpaNK7ajFxzHmuEajwmf3lH7wvqMxX63bEIaZHU1VNaL8FpO7XJqti2kM3S+LGteWy
+gxk6x9PbTZ4IevPuzz5i+6zoYMzRx6Fcg0XERczzF2sUyQQCPtIkpnnpHs6i58FZFZ8d4kuaPp92
+CC1r2LpXFNqD6v6MVenQTqnMdzGxRBF6XLE+0xRFFRhiJBPSy03OXIPBNvIQtQ6IbbjhVp+J3pZm
+OUdkLG5NrmJ7v2B0GbhWrJKsFjLtrWhV/pi60zTe9Mlhww6G9kuEYO4Ne7UyWHmRVSyBQ7N0H3qq
+JZ4d16GLuc1CLgSkZoNNiTW2bKg2SnkheCLQQrzRQDGQob4Ez8pn7fXwgNNgyYMqIgXQBztSvwye
+qiv5u+YfjyW6hY0XHgL+XVAEV8/+LbzvXMAaq7afJMbfc2hIkCwU9D9SGuTSyxTDYWnP4vkYxboz
+nxSjBF25cfe1lNj2M8FawTSLfJvdkzrnE6JwYZ+vj+vYxXX4M2bUdGc6N3ec592kD3ZDZopD8p/7
+DEJ4Y9HiD2971KE9dJeFt0g5QdYg/NA6s/rob8SKunE3vouXsXgxT7PntgMTzlSdriVZzH81Xwj3
+QEUxeCp6
+-----END CERTIFICATE-----
+
+GlobalSign Root E46
+===================
+-----BEGIN CERTIFICATE-----
+MIICCzCCAZGgAwIBAgISEdK7ujNu1LzmJGjFDYQdmOhDMAoGCCqGSM49BAMDMEYxCzAJBgNVBAYT
+AkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMRwwGgYDVQQDExNHbG9iYWxTaWduIFJvb3Qg
+RTQ2MB4XDTE5MDMyMDAwMDAwMFoXDTQ2MDMyMDAwMDAwMFowRjELMAkGA1UEBhMCQkUxGTAXBgNV
+BAoTEEdsb2JhbFNpZ24gbnYtc2ExHDAaBgNVBAMTE0dsb2JhbFNpZ24gUm9vdCBFNDYwdjAQBgcq
+hkjOPQIBBgUrgQQAIgNiAAScDrHPt+ieUnd1NPqlRqetMhkytAepJ8qUuwzSChDH2omwlwxwEwkB
+jtjqR+q+soArzfwoDdusvKSGN+1wCAB16pMLey5SnCNoIwZD7JIvU4Tb+0cUB+hflGddyXqBPCCj
+QjBAMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQxCpCPtsad0kRL
+gLWi5h+xEk8blTAKBggqhkjOPQQDAwNoADBlAjEA31SQ7Zvvi5QCkxeCmb6zniz2C5GMn0oUsfZk
+vLtoURMMA/cVi4RguYv/Uo7njLwcAjA8+RHUjE7AwWHCFUyqqx0LMV87HOIAl0Qx5v5zli/altP+
+CAezNIm8BZ/3Hobui3A=
+-----END CERTIFICATE-----
+
+GLOBALTRUST 2020
+================
+-----BEGIN CERTIFICATE-----
+MIIFgjCCA2qgAwIBAgILWku9WvtPilv6ZeUwDQYJKoZIhvcNAQELBQAwTTELMAkGA1UEBhMCQVQx
+IzAhBgNVBAoTGmUtY29tbWVyY2UgbW9uaXRvcmluZyBHbWJIMRkwFwYDVQQDExBHTE9CQUxUUlVT
+VCAyMDIwMB4XDTIwMDIxMDAwMDAwMFoXDTQwMDYxMDAwMDAwMFowTTELMAkGA1UEBhMCQVQxIzAh
+BgNVBAoTGmUtY29tbWVyY2UgbW9uaXRvcmluZyBHbWJIMRkwFwYDVQQDExBHTE9CQUxUUlVTVCAy
+MDIwMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAri5WrRsc7/aVj6B3GyvTY4+ETUWi
+D59bRatZe1E0+eyLinjF3WuvvcTfk0Uev5E4C64OFudBc/jbu9G4UeDLgztzOG53ig9ZYybNpyrO
+VPu44sB8R85gfD+yc/LAGbaKkoc1DZAoouQVBGM+uq/ufF7MpotQsjj3QWPKzv9pj2gOlTblzLmM
+CcpL3TGQlsjMH/1WljTbjhzqLL6FLmPdqqmV0/0plRPwyJiT2S0WR5ARg6I6IqIoV6Lr/sCMKKCm
+fecqQjuCgGOlYx8ZzHyyZqjC0203b+J+BlHZRYQfEs4kUmSFC0iAToexIiIwquuuvuAC4EDosEKA
+A1GqtH6qRNdDYfOiaxaJSaSjpCuKAsR49GiKweR6NrFvG5Ybd0mN1MkGco/PU+PcF4UgStyYJ9OR
+JitHHmkHr96i5OTUawuzXnzUJIBHKWk7buis/UDr2O1xcSvy6Fgd60GXIsUf1DnQJ4+H4xj04KlG
+DfV0OoIu0G4skaMxXDtG6nsEEFZegB31pWXogvziB4xiRfUg3kZwhqG8k9MedKZssCz3AwyIDMvU
+clOGvGBG85hqwvG/Q/lwIHfKN0F5VVJjjVsSn8VoxIidrPIwq7ejMZdnrY8XD2zHc+0klGvIg5rQ
+mjdJBKuxFshsSUktq6HQjJLyQUp5ISXbY9e2nKd+Qmn7OmMCAwEAAaNjMGEwDwYDVR0TAQH/BAUw
+AwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFNwuH9FhN3nkq9XVsxJxaD1qaJwiMB8GA1Ud
+IwQYMBaAFNwuH9FhN3nkq9XVsxJxaD1qaJwiMA0GCSqGSIb3DQEBCwUAA4ICAQCR8EICaEDuw2jA
+VC/f7GLDw56KoDEoqoOOpFaWEhCGVrqXctJUMHytGdUdaG/7FELYjQ7ztdGl4wJCXtzoRlgHNQIw
+4Lx0SsFDKv/bGtCwr2zD/cuz9X9tAy5ZVp0tLTWMstZDFyySCstd6IwPS3BD0IL/qMy/pJTAvoe9
+iuOTe8aPmxadJ2W8esVCgmxcB9CpwYhgROmYhRZf+I/KARDOJcP5YBugxZfD0yyIMaK9MOzQ0MAS
+8cE54+X1+NZK3TTN+2/BT+MAi1bikvcoskJ3ciNnxz8RFbLEAwW+uxF7Cr+obuf/WEPPm2eggAe2
+HcqtbepBEX4tdJP7wry+UUTF72glJ4DjyKDUEuzZpTcdN3y0kcra1LGWge9oXHYQSa9+pTeAsRxS
+vTOBTI/53WXZFM2KJVj04sWDpQmQ1GwUY7VA3+vA/MRYfg0UFodUJ25W5HCEuGwyEn6CMUO+1918
+oa2u1qsgEu8KwxCMSZY13At1XrFP1U80DhEgB3VDRemjEdqso5nCtnkn4rnvyOL2NSl6dPrFf4IF
+YqYK6miyeUcGbvJXqBUzxvd4Sj1Ce2t+/vdG6tHrju+IaFvowdlxfv1k7/9nR4hYJS8+hge9+6jl
+gqispdNpQ80xiEmEU5LAsTkbOYMBMMTyqfrQA71yN2BWHzZ8vTmR9W0Nv3vXkg==
+-----END CERTIFICATE-----
+
+ANF Secure Server Root CA
+=========================
+-----BEGIN CERTIFICATE-----
+MIIF7zCCA9egAwIBAgIIDdPjvGz5a7EwDQYJKoZIhvcNAQELBQAwgYQxEjAQBgNVBAUTCUc2MzI4
+NzUxMDELMAkGA1UEBhMCRVMxJzAlBgNVBAoTHkFORiBBdXRvcmlkYWQgZGUgQ2VydGlmaWNhY2lv
+bjEUMBIGA1UECxMLQU5GIENBIFJhaXoxIjAgBgNVBAMTGUFORiBTZWN1cmUgU2VydmVyIFJvb3Qg
+Q0EwHhcNMTkwOTA0MTAwMDM4WhcNMzkwODMwMTAwMDM4WjCBhDESMBAGA1UEBRMJRzYzMjg3NTEw
+MQswCQYDVQQGEwJFUzEnMCUGA1UEChMeQU5GIEF1dG9yaWRhZCBkZSBDZXJ0aWZpY2FjaW9uMRQw
+EgYDVQQLEwtBTkYgQ0EgUmFpejEiMCAGA1UEAxMZQU5GIFNlY3VyZSBTZXJ2ZXIgUm9vdCBDQTCC
+AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANvrayvmZFSVgpCjcqQZAZ2cC4Ffc0m6p6zz
+BE57lgvsEeBbphzOG9INgxwruJ4dfkUyYA8H6XdYfp9qyGFOtibBTI3/TO80sh9l2Ll49a2pcbnv
+T1gdpd50IJeh7WhM3pIXS7yr/2WanvtH2Vdy8wmhrnZEE26cLUQ5vPnHO6RYPUG9tMJJo8gN0pcv
+B2VSAKduyK9o7PQUlrZXH1bDOZ8rbeTzPvY1ZNoMHKGESy9LS+IsJJ1tk0DrtSOOMspvRdOoiXse
+zx76W0OLzc2oD2rKDF65nkeP8Nm2CgtYZRczuSPkdxl9y0oukntPLxB3sY0vaJxizOBQ+OyRp1RM
+VwnVdmPF6GUe7m1qzwmd+nxPrWAI/VaZDxUse6mAq4xhj0oHdkLePfTdsiQzW7i1o0TJrH93PB0j
+7IKppuLIBkwC/qxcmZkLLxCKpvR/1Yd0DVlJRfbwcVw5Kda/SiOL9V8BY9KHcyi1Swr1+KuCLH5z
+JTIdC2MKF4EA/7Z2Xue0sUDKIbvVgFHlSFJnLNJhiQcND85Cd8BEc5xEUKDbEAotlRyBr+Qc5RQe
+8TZBAQIvfXOn3kLMTOmJDVb3n5HUA8ZsyY/b2BzgQJhdZpmYgG4t/wHFzstGH6wCxkPmrqKEPMVO
+Hj1tyRRM4y5Bu8o5vzY8KhmqQYdOpc5LMnndkEl/AgMBAAGjYzBhMB8GA1UdIwQYMBaAFJxf0Gxj
+o1+TypOYCK2Mh6UsXME3MB0GA1UdDgQWBBScX9BsY6Nfk8qTmAitjIelLFzBNzAOBgNVHQ8BAf8E
+BAMCAYYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEATh65isagmD9uw2nAalxJ
+UqzLK114OMHVVISfk/CHGT0sZonrDUL8zPB1hT+L9IBdeeUXZ701guLyPI59WzbLWoAAKfLOKyzx
+j6ptBZNscsdW699QIyjlRRA96Gejrw5VD5AJYu9LWaL2U/HANeQvwSS9eS9OICI7/RogsKQOLHDt
+dD+4E5UGUcjohybKpFtqFiGS3XNgnhAY3jyB6ugYw3yJ8otQPr0R4hUDqDZ9MwFsSBXXiJCZBMXM
+5gf0vPSQ7RPi6ovDj6MzD8EpTBNO2hVWcXNyglD2mjN8orGoGjR0ZVzO0eurU+AagNjqOknkJjCb
+5RyKqKkVMoaZkgoQI1YS4PbOTOK7vtuNknMBZi9iPrJyJ0U27U1W45eZ/zo1PqVUSlJZS2Db7v54
+EX9K3BR5YLZrZAPbFYPhor72I5dQ8AkzNqdxliXzuUJ92zg/LFis6ELhDtjTO0wugumDLmsx2d1H
+hk9tl5EuT+IocTUW0fJz/iUrB0ckYyfI+PbZa/wSMVYIwFNCr5zQM378BvAxRAMU8Vjq8moNqRGy
+g77FGr8H6lnco4g175x2MjxNBiLOFeXdntiP2t7SxDnlF4HPOEfrf4htWRvfn0IUrn7PqLBmZdo3
+r5+qPeoott7VMVgWglvquxl1AnMaykgaIZOQCo6ThKd9OyMYkomgjaw=
+-----END CERTIFICATE-----
+
+Certum EC-384 CA
+================
+-----BEGIN CERTIFICATE-----
+MIICZTCCAeugAwIBAgIQeI8nXIESUiClBNAt3bpz9DAKBggqhkjOPQQDAzB0MQswCQYDVQQGEwJQ
+TDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2Vy
+dGlmaWNhdGlvbiBBdXRob3JpdHkxGTAXBgNVBAMTEENlcnR1bSBFQy0zODQgQ0EwHhcNMTgwMzI2
+MDcyNDU0WhcNNDMwMzI2MDcyNDU0WjB0MQswCQYDVQQGEwJQTDEhMB8GA1UEChMYQXNzZWNvIERh
+dGEgU3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkx
+GTAXBgNVBAMTEENlcnR1bSBFQy0zODQgQ0EwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATEKI6rGFtq
+vm5kN2PkzeyrOvfMobgOgknXhimfoZTy42B4mIF4Bk3y7JoOV2CDn7TmFy8as10CW4kjPMIRBSqn
+iBMY81CE1700LCeJVf/OTOffph8oxPBUw7l8t1Ot68KjQjBAMA8GA1UdEwEB/wQFMAMBAf8wHQYD
+VR0OBBYEFI0GZnQkdjrzife81r1HfS+8EF9LMA4GA1UdDwEB/wQEAwIBBjAKBggqhkjOPQQDAwNo
+ADBlAjADVS2m5hjEfO/JUG7BJw+ch69u1RsIGL2SKcHvlJF40jocVYli5RsJHrpka/F2tNQCMQC0
+QoSZ/6vnnvuRlydd3LBbMHHOXjgaatkl5+r3YZJW+OraNsKHZZYuciUvf9/DE8k=
+-----END CERTIFICATE-----
+
+Certum Trusted Root CA
+======================
+-----BEGIN CERTIFICATE-----
+MIIFwDCCA6igAwIBAgIQHr9ZULjJgDdMBvfrVU+17TANBgkqhkiG9w0BAQ0FADB6MQswCQYDVQQG
+EwJQTDEhMB8GA1UEChMYQXNzZWNvIERhdGEgU3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0g
+Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkxHzAdBgNVBAMTFkNlcnR1bSBUcnVzdGVkIFJvb3QgQ0Ew
+HhcNMTgwMzE2MTIxMDEzWhcNNDMwMzE2MTIxMDEzWjB6MQswCQYDVQQGEwJQTDEhMB8GA1UEChMY
+QXNzZWNvIERhdGEgU3lzdGVtcyBTLkEuMScwJQYDVQQLEx5DZXJ0dW0gQ2VydGlmaWNhdGlvbiBB
+dXRob3JpdHkxHzAdBgNVBAMTFkNlcnR1bSBUcnVzdGVkIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEB
+AQUAA4ICDwAwggIKAoICAQDRLY67tzbqbTeRn06TpwXkKQMlzhyC93yZn0EGze2jusDbCSzBfN8p
+fktlL5On1AFrAygYo9idBcEq2EXxkd7fO9CAAozPOA/qp1x4EaTByIVcJdPTsuclzxFUl6s1wB52
+HO8AU5853BSlLCIls3Jy/I2z5T4IHhQqNwuIPMqw9MjCoa68wb4pZ1Xi/K1ZXP69VyywkI3C7Te2
+fJmItdUDmj0VDT06qKhF8JVOJVkdzZhpu9PMMsmN74H+rX2Ju7pgE8pllWeg8xn2A1bUatMn4qGt
+g/BKEiJ3HAVz4hlxQsDsdUaakFjgao4rpUYwBI4Zshfjvqm6f1bxJAPXsiEodg42MEx51UGamqi4
+NboMOvJEGyCI98Ul1z3G4z5D3Yf+xOr1Uz5MZf87Sst4WmsXXw3Hw09Omiqi7VdNIuJGmj8PkTQk
+fVXjjJU30xrwCSss0smNtA0Aq2cpKNgB9RkEth2+dv5yXMSFytKAQd8FqKPVhJBPC/PgP5sZ0jeJ
+P/J7UhyM9uH3PAeXjA6iWYEMspA90+NZRu0PqafegGtaqge2Gcu8V/OXIXoMsSt0Puvap2ctTMSY
+njYJdmZm/Bo/6khUHL4wvYBQv3y1zgD2DGHZ5yQD4OMBgQ692IU0iL2yNqh7XAjlRICMb/gv1SHK
+HRzQ+8S1h9E6Tsd2tTVItQIDAQABo0IwQDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSM+xx1
+vALTn04uSNn5YFSqxLNP+jAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQENBQADggIBAEii1QAL
+LtA/vBzVtVRJHlpr9OTy4EA34MwUe7nJ+jW1dReTagVphZzNTxl4WxmB82M+w85bj/UvXgF2Ez8s
+ALnNllI5SW0ETsXpD4YN4fqzX4IS8TrOZgYkNCvozMrnadyHncI013nR03e4qllY/p0m+jiGPp2K
+h2RX5Rc64vmNueMzeMGQ2Ljdt4NR5MTMI9UGfOZR0800McD2RrsLrfw9EAUqO0qRJe6M1ISHgCq8
+CYyqOhNf6DR5UMEQGfnTKB7U0VEwKbOukGfWHwpjscWpxkIxYxeU72nLL/qMFH3EQxiJ2fAyQOaA
+4kZf5ePBAFmo+eggvIksDkc0C+pXwlM2/KfUrzHN/gLldfq5Jwn58/U7yn2fqSLLiMmq0Uc9Nneo
+WWRrJ8/vJ8HjJLWG965+Mk2weWjROeiQWMODvA8s1pfrzgzhIMfatz7DP78v3DSk+yshzWePS/Tj
+6tQ/50+6uaWTRRxmHyH6ZF5v4HaUMst19W7l9o/HuKTMqJZ9ZPskWkoDbGs4xugDQ5r3V7mzKWmT
+OPQD8rv7gmsHINFSH5pkAnuYZttcTVoP0ISVoDwUQwbKytu4QTbaakRnh6+v40URFWkIsr4WOZck
+bxJF0WddCajJFdr60qZfE2Efv4WstK2tBZQIgx51F9NxO5NQI1mg7TyRVJ12AMXDuDjb
+-----END CERTIFICATE-----
@@ -27,6 +27,10 @@ if lsb_release -av 2>&1|egrep 'Debian.*jessie'; then
 	echo "Disabling ASan due to false positives on deb8"
 	echo 'EXTRAPARA="--enable-werror --disable-asan"' >>config.settings
 fi
+if uname -s|grep -i freebsd; then
+	echo "Disabling ASan on FreeBSD due to 100% CPU loop in OpenSSL initialization routine"
+	echo 'EXTRAPARA="--enable-werror --disable-asan"' >>config.settings
+fi

 # If SSLDIR is set the environment, this overrides config.settings
 # Used for example in the openssl3 build tests.
@@ -4,7 +4,7 @@ OUTF="curl-latest.tar.gz"
 OUTD="curl-latest"
 ARESPATH="`pwd`/extras/c-ares"
 UNREALDIR="`pwd`"
-CARESVERSION="1.17.1"
+CARESVERSION="1.17.2"
 LIBDIR="$1"

 if [ "x$1" = "x" ]; then
@@ -1,11 +1,10 @@
 Welcome to the doxygen-generated documentation for the UnrealIRCd 5.x API.
 This is intended **for developers only!**

-If you are creating a 3rd party module for UnrealIRCd or are interested
-in contributing to UnrealIRCd then this is the right place.
-
-Here you should be able to find a lot of information on the data structures
-and functions available to you when coding for UnrealIRCd.
+Note that UnrealIRCd 5 is the **old stable**, it is no longer receiving new
+features and is bug fix only. If you are developing a new 3rd party module
+then you are suggested to develop for UnrealIRCd 6 and go to the
+[UnrealIRCd 6 module api](https://www.unrealircd.org/api/6/) page instead.

 ## Wiki documentation ##
 * Be sure to check the [Module API](https://www.unrealircd.org/docs/Dev:Module_API) article on the wiki
@@ -38,7 +38,7 @@ PROJECT_NAME           = "UnrealIRCd"
 # could be handy for archiving the generated documentation or if some version
 # control system is used.

-PROJECT_NUMBER         = 5.2.2-git
+PROJECT_NUMBER         = 5.2.4

 # Using the PROJECT_BRIEF tag one can provide an optional one line description
 # for a project that appears at the top of each page and should give viewer a
@@ -1,11 +1,11 @@
-#!/bin/bash
+#!/usr/bin/env bash
 #
 # This is stage 1 of the UnrealIRCd upgrade script
 # It downloads stage 2 online, verifies the integrity, and then
 # passes control to it to proceed with the rest of the upgrade.
 #
-# This is a bash script, so it is less cross-platform than
-# the rest of UnrealIRCd. We also mostly assume Linux here.
+# This is a bash script, so it is less cross-platform than the
+# rest of UnrealIRCd. We also mostly assume Linux/FreeBSD here.
 #

 BUILDDIR="@BUILDDIR@"
@@ -55,13 +55,19 @@ if [ ! -d "$BUILDDIR" ]; then
 	exit 1
 fi

+FETCHER="wget"
 if ! wget --help 1>/dev/null 2>&1; then
-	echo "The tool 'wget' is missing, which is used by this script."
-	echo "On Linux consider running 'sudo apt install wget' or 'sudo yum install wget'"
-	echo "and run this script again."
-	echo "Or, don't use this script and follow the manual upgrade procedure from"
-	echo "https://www.unrealircd.org/docs/Upgrading"
-	exit 1
+	# fetch is a pain: it always returns 1 (false) even for usage info and has no --version
+	fetch 1>/dev/null 2>&1
+	if [ "$?" -ne 1 ]; then
+		echo "The tool 'wget' is missing, which is used by this script."
+		echo "On Linux consider running 'sudo apt install wget' or 'sudo yum install wget'"
+		echo "and run this script again."
+		echo "Or, don't use this script and follow the manual upgrade procedure from"
+		echo "https://www.unrealircd.org/docs/Upgrading"
+		exit 1
+	fi
+	FETCHER="fetch"
 fi

 # Weird way to get version, but ok.
@@ -70,11 +76,16 @@ UNREALVER="`./configure --version|head -n1|awk '{ print $3 }'`"
 cd .. || fail "Could not cd back"

 # Set and export all variables with settings
-export UNREALVER BUILDDIR SCRIPTDIR DOCDIR TMPDIR
+export UNREALVER BUILDDIR SCRIPTDIR DOCDIR TMPDIR FETCHER

 # Download the install script
-wget -O unrealircd-upgrade-script.stage2 "https://www.unrealircd.org/downloads/unrealircd-upgrade-script.stage2?from=$UNREALVER" || fail "Could not download online installer"
-wget -O unrealircd-upgrade-script.stage2.asc "https://www.unrealircd.org/downloads/unrealircd-upgrade-script.stage2.asc" || fail "Could not download online installer signature"
+if [ "$FETCHER" = "wget" ]; then
+	wget -O unrealircd-upgrade-script.stage2 "https://www.unrealircd.org/downloads/unrealircd-upgrade-script.stage2?from=$UNREALVER" || fail "Could not download online installer"
+	wget -O unrealircd-upgrade-script.stage2.asc "https://www.unrealircd.org/downloads/unrealircd-upgrade-script.stage2.asc" || fail "Could not download online installer signature"
+else
+	fetch -o unrealircd-upgrade-script.stage2 "https://www.unrealircd.org/downloads/unrealircd-upgrade-script.stage2?from=$UNREALVER" || fail "Could not download online installer"
+	fetch -o unrealircd-upgrade-script.stage2.asc "https://www.unrealircd.org/downloads/unrealircd-upgrade-script.stage2.asc" || fail "Could not download online installer signature"
+fi

 # GPG verification - if available
 if gpg --version 1>/dev/null 2>&1; then
@@ -94,7 +105,11 @@ if gpg --version 1>/dev/null 2>&1; then
 	fi
 else
 	echo "WARNING: The GnuPG (GPG/PGP) verification tool 'gpg' is not installed."
-	echo "Consider running 'sudo apt install gpg' or 'yum install gnupg2'"
+	if [[ "$OSTYPE" == "freebsd"* ]] ; then
+		echo "Consider running 'sudo pkg install gnupg'"
+	else
+		echo "Consider running 'sudo apt install gpg' or 'yum install gnupg2'"
+	fi
 	echo "When 'gpg' is installed then the UnrealIRCd upgrade script can"
 	echo "verify the digital signature of the download file."
 	warn "Unable to check download integrity"
@@ -103,3 +118,6 @@ fi

 chmod +x unrealircd-upgrade-script.stage2
 ./unrealircd-upgrade-script.stage2 $*
+SAVERET="$?"
+rm -f unrealircd-upgrade-script.stage2 unrealircd-upgrade-script.stage2
+exit $SAVERET
@@ -54,8 +54,9 @@
 * Can be useful if the above 3 versionids are insufficient for you (eg: you want to support CVS).
 * This is updated automatically on the CVS server every Monday. so don't touch it.
 */
-#define UNREAL_VERSION_TIME	202125
+#define UNREAL_VERSION_TIME	202139

+#define UNREAL_VERSION		((UNREAL_VERSION_GENERATION << 24) + (UNREAL_VERSION_MAJOR << 16) + (UNREAL_VERSION_MINOR << 8))
 #define UnrealProtocol 		5002
 #define PATCH1  		macro_to_str(UNREAL_VERSION_GENERATION)
 #define PATCH2  		"." macro_to_str(UNREAL_VERSION_MAJOR)
@@ -63,7 +63,7 @@
 #define UNREAL_VERSION_MAJOR 2

 /* Minor version number (e.g.: 1 for Unreal3.2.1) */
-#define UNREAL_VERSION_MINOR 1
+#define UNREAL_VERSION_MINOR 4

 /* Version suffix such as a beta marker or release candidate marker. (e.g.:
   -rcX for unrealircd-3.2.9-rcX) */
@@ -29,6 +29,7 @@ MODVAR Event *events = NULL;

 extern EVENT(unrealdns_removeoldrecords);
 extern EVENT(unrealdb_expire_secret_cache);
+extern EVENT(deprecated_notice);

 /** Add an event, a function that will run at regular intervals.
 * @param module	Module that this event belongs to
@@ -237,9 +238,11 @@ void SetupEvents(void)
 	EventAdd(NULL, "garbage", garbage_collect, NULL, GARBAGE_COLLECT_EVERY*1000, 0);
 	EventAdd(NULL, "loop", loop_event, NULL, 1000, 0);
 	EventAdd(NULL, "unrealdns_removeoldrecords", unrealdns_removeoldrecords, NULL, 15000, 0);
+	EventAdd(NULL, "deprecated_notice", deprecated_notice, NULL, ((86400*7)-(3600*8))*1000, 0);
 	EventAdd(NULL, "check_pings", check_pings, NULL, 1000, 0);
 	EventAdd(NULL, "check_deadsockets", check_deadsockets, NULL, 1000, 0);
 	EventAdd(NULL, "handshake_timeout", handshake_timeout, NULL, 1000, 0);
 	EventAdd(NULL, "tls_check_expiry", tls_check_expiry, NULL, (86400/2)*1000, 0);
 	EventAdd(NULL, "unrealdb_expire_secret_cache", unrealdb_expire_secret_cache, NULL, 61000, 0);
+	EventAdd(NULL, "throttling_check_expire", throttling_check_expire, NULL, 1000, 0);
 }
@@ -649,6 +649,13 @@ int crashreport_send(char *fname)
 	if ((n < 0) || strncmp(buf, "HTTP/1.1 100", 12))
 	{
 		printf("Error transmitting bug report (stage II, n=%d)\n", n);
+		if (!strncmp(buf, "HTTP/1.1 403", 12))
+		{
+			printf("Your crash report was rejected automatically.\n"
+			       "This normally means your UnrealIRCd version is too old and unsupported.\n"
+			       "Chances are that your crash issue is already fixed in a later release.\n"
+			       "Check https://www.unrealircd.org/ for latest releases!\n");
+		}
 		return 0;
 	}
 	
@@ -758,6 +765,22 @@ void report_crash(void)
 	if (!fname)
 		return;

+	if (time(NULL) > 1688169600)
+	{
+		printf("Crash report generated in '%s' but NOT sent.\n\n"
+		       "UnrealIRCd 5 is no longer supported since July 1, 2023.\n"
+		       "All support stopped after that date. You had 18+ months to upgrade.\n"
+		       "See https://www.unrealircd.org/docs/UnrealIRCd_5_EOL.\n",
+		       fname);
+		return;
+	} else
+	if (time(NULL) > 1656633600)
+	{
+		printf("WARNING: UnrealIRCd 5 is only receiving security fixes until July 1, 2023.\n"
+		       "         See https://www.unrealircd.org/docs/UnrealIRCd_5_EOL\n");
+		/* continue below.. */
+	}
+
 	if (thirdpartymods == 0)
 		thirdpartymods = check_third_party_mods_present();
 #ifndef _WIN32
@@ -289,12 +289,7 @@ void init_hash(void)

 	memset(channelTable, 0, sizeof(channelTable));
 	memset(watchTable, 0, sizeof(watchTable));
-
 	memset(ThrottlingHash, 0, sizeof(ThrottlingHash));
-	/* do not call init_throttling() here, as
-	 * config file has not been read yet.
-	 * The hash table is ready, anyway.
-	 */

 	if (strcmp(BASE_VERSION, &unreallogo[337]))
 		loop.tainted = 1;
@@ -925,14 +920,6 @@ void update_throttling_timer_settings(void)
 	EventMod(EventFind("throttling_check_expire"), &eInfo);
 }

-void init_throttling()
-{
-	EventAdd(NULL, "throttling_check_expire", throttling_check_expire, NULL, 123456, 0);
-	/* Note: the every_ms value (123,456) will be adjusted on boot and rehash
-	 * via the update_throttling_timer_settings() function.
-	 */
-}
-
 uint64_t hash_throttling(char *ip)
 {
 	return siphash(ip, siphashkey_throttling) % THROTTLING_HASH_TABLE_SIZE;
@@ -486,6 +486,18 @@ EVENT(check_deadsockets)
 	}
 }

+EVENT(deprecated_notice)
+{
+	/* Send a warning to opers currently online every week after January 1, 2023 */
+	if (TStime() > 1672527600)
+	{
+		char *msg = "[WARNING] UnrealIRCd 5.x is no longer supported after July 1, 2023. "
+		            "See https://www.unrealircd.org/docs/UnrealIRCd_5_EOL";
+		sendto_realops("%s", msg);
+		ircd_log(LOG_ERROR, "%s", msg);
+	}
+}
+
 /*
 ** bad_command
 **	This is called when the commandline is not acceptable.
@@ -1177,6 +1189,13 @@ int InitUnrealIRCd(int argc, char *argv[])
 #ifndef _WIN32
 	fprintf(stderr, "Dynamic configuration initialized.. booting IRCd.\n");
 #endif
+	/* Warn about this starting September 1, 2022 (9 months in advance) */
+	if (time(NULL) > 1661983200)
+	{
+		fprintf(stderr, "\n"
+		                "[WARNING] UnrealIRCd 5.x is no longer supported after July 1, 2023.\n"
+		                "          See https://www.unrealircd.org/docs/UnrealIRCd_5_EOL\n\n");
+	}
 	open_debugfile();
 	me.local->port = 6667; /* pointless? */
 	init_sys();
@@ -1240,7 +1259,6 @@ int InitUnrealIRCd(int argc, char *argv[])
 	fix_timers();
 	write_pidfile();
 	Debug((DEBUG_NOTICE, "Server ready..."));
-	init_throttling();
 	loop.ircd_booted = 1;
 #if defined(HAVE_SETPROCTITLE)
 	setproctitle("%s", me.name);
@@ -73,6 +73,7 @@ char langsinuse[4096];
 #define LANGAV_CYRILLIC_UTF8		0x008000 /* UTF8: cyrillic script */
 #define LANGAV_GREEK_UTF8		0x010000 /* UTF8: greek script */
 #define LANGAV_HEBREW_UTF8		0x020000 /* UTF8: hebrew script */
+#define LANGAV_ARABIC_UTF8		0x040000 /* UTF8: arabic script */
 typedef struct LangList LangList;
 struct LangList
 {
@@ -84,6 +85,7 @@ struct LangList
 /* MUST be alphabetized (first column) */
 static LangList langlist[] = {
 /*	{ "arabic",       "ara", LANGAV_ASCII|LANGAV_ISO8859_6 }, -- TODO: check if this has issues first! */
+	{ "arabic-utf8", "ara-utf8", LANGAV_ASCII|LANGAV_UTF8|LANGAV_ARABIC_UTF8 },
 	{ "belarussian-utf8", "blr-utf8", LANGAV_ASCII|LANGAV_UTF8|LANGAV_CYRILLIC_UTF8 },
 	{ "belarussian-w1251", "blr", LANGAV_ASCII|LANGAV_W1251 },
 	{ "catalan",      "cat", LANGAV_ASCII|LANGAV_LATIN1 },
@@ -313,6 +315,8 @@ int charsys_config_posttest(int *errs)
 	    x++;
 	if (x > 1)
 	{
+#if 0
+// I don't think this should be hard error, right? Some combinations may be problematic, but not all.
 		if (langav & LANGAV_LATIN_UTF8)
 		{
 			config_error("ERROR: set::allowed-nickchars: you cannot combine 'latin-utf8' with any other character set");
@@ -333,8 +337,13 @@ int charsys_config_posttest(int *errs)
 			config_error("ERROR: set::allowed-nickchars: you cannot combine 'hebrew-utf8' with any other character set");
 			errors++;
 		}
-		config_status("WARNING: set::allowed-nickchars: "
-		            "Mixing of charsets (eg: latin1+latin2) can cause display problems");
+		if (langav & LANGAV_ARABIC_UTF8)
+		{
+			config_error("ERROR: set::allowed-nickchars: you cannot combine 'arabic-utf8' with any other character set");
+			errors++;
+		}
+#endif
+		config_status("WARNING: set::allowed-nickchars: Mixing of charsets (eg: latin1+latin2) may cause display problems");
 	}

 	*errs = errors;
@@ -1181,6 +1190,19 @@ void charsys_add_language(char *name)
 		charsys_addmultibyterange(0xc5, 0xc5, 0xaa, 0xab);
 		charsys_addmultibyterange(0xc5, 0xc5, 0xbd, 0xbe);
 	}
+
+	/* [ARABIC] */
+	if (latin_utf8 || !strcmp(name, "arabic-utf8"))
+	{
+		/* Supplied by Sensiva */
+		/*charsys_addallowed("Ø§Ø£Ø¥Ø¢Ø¡Ø¨ØªØ«Ø¬ØØ®Ø¯Ø°Ø±Ø²Ø³Ø´ØµØ¶Ø·Ø¸Ø¹ØºÙ�Ù‚ÙƒÙ„Ù…Ù†Ù‡Ø¤Ø©ÙˆÙŠÙ‰Ø¦");*/
+		/*- From U+0621 to U+063A (Regex: [\u0621-\u063A])*/
+		/* 0xd8a1 - 0xd8ba */
+		charsys_addmultibyterange(0xd8, 0xd8, 0xa1, 0xba);
+		/*- From U+0641 to U+064A (Regex: [\u0641-\u064A])*/
+		/* 0xd981 - 0xd98a */
+		charsys_addmultibyterange(0xd9, 0xd9, 0x81, 0x8a);
+	}
 }

 /** This displays all the nick characters that are permitted */
@@ -1250,6 +1272,8 @@ char *charsys_group(int v)
 		return "Greek script";
 	if (v & LANGAV_HEBREW_UTF8)
 		return "Hebrew script";
+	if (v & LANGAV_ARABIC_UTF8)
+		return "Arabic script";

 	return "Other";
 }
@@ -258,6 +258,7 @@ CMD_FUNC(cmd_chathistory)
 	}

 	channel = find_channel(parv[2], NULL);
+
 	if (!channel)
 	{
 		sendto_one(client, NULL, ":%s FAIL CHATHISTORY INVALID_TARGET %s %s :Messages could not be retrieved, not an existing channel",
@@ -273,9 +274,21 @@ CMD_FUNC(cmd_chathistory)
 	}

 	if (!has_channel_mode(channel, 'H'))
+	/* empty history = empty batch */
 	{
-		sendto_one(client, NULL, ":%s FAIL CHATHISTORY INVALID_TARGET %s %s :Messages could not be retrieved, channel does not have mode +H",
-			me.name, parv[1], parv[2]);
+		char batch[BATCHLEN+1];
+
+		batch[0] = '\0';
+		if (HasCapability(client, "batch"))
+		{
+			/* Start a new batch */
+			generate_batch_id(batch);
+			sendto_one(client, NULL, ":%s BATCH +%s chathistory %s", me.name, batch, channel->chname);
+		}
+
+		/* End of batch */
+		if (*batch)
+			sendto_one(client, NULL, ":%s BATCH -%s", me.name, batch);
 		return;
 	}

@@ -25,7 +25,7 @@
 ModuleHeader MOD_HEADER
  = {
 	"dccdeny",
-	"5.0",
+	"5.2.4",
 	"command /dccdeny", 
 	"UnrealIRCd Team",
 	"unrealircd-5",
@@ -517,11 +517,8 @@ int dccdeny_can_send_to_channel(Client *client, Channel *channel, Membership *lp
 		char *filename = get_dcc_filename(*msg);
 		if (filename && !can_dcc(client, channel->chname, NULL, filename, &err))
 		{
-			if (!IsDead(client) && (sendtype != SEND_TYPE_NOTICE))
-			{
-				strlcpy(errbuf, err, sizeof(errbuf));
-				*errmsg = errbuf;
-			}
+			strlcpy(errbuf, err, sizeof(errbuf));
+			*errmsg = errbuf;
 			return HOOK_DENY;
 		}
 	}
@@ -640,7 +637,11 @@ static int can_dcc(Client *client, char *target, Client *targetcli, char *filena
 	}

 	if (match_spamfilter(client, filename, SPAMF_DCC, "PRIVMSG", target, 0, NULL))
+	{
+		/* Dirty hack, yeah spamfilter already sent the error message :( */
+		*errmsg = "";
 		return 0;
+	}

 	if ((fl = dcc_isforbidden(client, filename)))
 	{
@@ -37,7 +37,7 @@ long CAP_MESSAGE_TAGS = 0; /**< Looked up at MOD_LOAD, may stay 0 if message-tag
 ModuleHeader MOD_HEADER
  = {
 	"message",	/* Name of module */
-	"5.0", /* Version */
+	"5.2.4", /* Version */
 	"private message and notice", /* Short description of module */
 	"UnrealIRCd Team",
 	"unrealircd-5",
@@ -371,7 +371,7 @@ void cmd_message(Client *client, MessageTag *recv_mtags, int parc, char *parv[],
 					 */
 					if (IsDead(client))
 						return;
-					if (!IsDead(client) && (sendtype != SEND_TYPE_NOTICE) && errmsg)
+					if (!IsDead(client) && (sendtype != SEND_TYPE_NOTICE) && !BadPtr(errmsg))
 						sendnumeric(client, ERR_CANNOTSENDTOCHAN, channel->chname, errmsg, p2);
 					continue; /* skip delivery to this target */
 				}
@@ -476,7 +476,7 @@ void cmd_message(Client *client, MessageTag *recv_mtags, int parc, char *parv[],
 				/* Message is discarded */
 				if (IsDead(client))
 					return;
-				if ((sendtype != SEND_TYPE_NOTICE) && errmsg)
+				if ((sendtype != SEND_TYPE_NOTICE) && !BadPtr(errmsg))
 					sendnumeric(client, ERR_CANTSENDTOUSER, target->name, errmsg);
 			} else
 			{
@@ -100,7 +100,7 @@ CMD_FUNC(cmd_svslogin)
 {
 	Client *target;

-	if (!SASL_SERVER || MyUser(client) || (parc < 3) || !parv[3])
+	if (MyUser(client) || (parc < 3) || !parv[3])
 		return;

 	/* We actually ignore parv[1] since this is a broadcast message.
@@ -1711,7 +1711,7 @@ void server_generic_free(ModData *m)

 int server_post_connect(Client *client) {
 	if (cfg.autoconnect_strategy == AUTOCONNECT_SEQUENTIAL_FALLBACK && last_autoconnect_server
-		&& !strcmp(last_autoconnect_server, client->serv->conf->servername))
+		&& !strcmp(last_autoconnect_server, client->name))
 	{
 		last_autoconnect_server = NULL;
 	}
@@ -73,5 +73,8 @@ CMD_FUNC(cmd_wallops)
 		return;
 	}

+	if (MyUser(client))
+		sendto_prefix_one(client, client, NULL, ":%s WALLOPS :%s", client->name, message);
+
 	sendto_ops_butone(client->direction, client, ":%s WALLOPS :%s", client->name, message);
 }
@@ -230,6 +230,7 @@ void websocket_mdata_free(ModData *m)
 	{
 		safe_free(wsu->handshake_key);
 		safe_free(wsu->lefttoparse);
+		safe_free(wsu->sec_websocket_protocol);
 		safe_free(m->ptr);
 	}
 }
@@ -7,7 +7,7 @@ echo "Extracting src/version.c..."
 if [ -d ../.git ]; then
 	SUFFIX="-$(git rev-parse --short HEAD)"
 fi
-id="5.2.2-git$SUFFIX"
+id="5.2.4$SUFFIX"
 echo "$id"

 if test -r version.c
@@ -3,7 +3,7 @@
 <assemblyIdentity
    processorArchitecture="amd64"
    name="UnrealIRCd.UnrealIRCd.5"
-    version="5.2.2.0"
+    version="5.2.4.0"
    type="win32"
 />
 <description>Internet Relay Chat Daemon</description>
@@ -6,7 +6,7 @@

 [Setup]
 AppName=UnrealIRCd 5
-AppVerName=UnrealIRCd 5.2.2-git
+AppVerName=UnrealIRCd 5.2.4
 AppPublisher=UnrealIRCd Team
 AppPublisherURL=https://www.unrealircd.org
 AppSupportURL=https://www.unrealircd.org
@@ -104,7 +104,20 @@ var
 function InitializeSetup(): Boolean;
 var
 	major: Cardinal;
+	d: Integer;
 begin
+	d := StrToInt(GetDateTimeString('yyyymm',#0,#0));
+	if (d > 202209) then
+	begin
+		MsgBox('You are installing the old UnrealIRCd 5.x stable series. This branch will receive security fixes only until July 1, 2023. ' +
+		       'After that date, all support for the UnrealIRCd 5.x series will stop. ' +
+		       'Please consider upgrading. See https://www.unrealircd.org/docs/UnrealIRCd_5_EOL', mbInformation, MB_OK);
+		if (d > 202303) then
+		begin
+			ShellExec('open', 'https://www.unrealircd.org/docs/UnrealIRCd_5_EOL', '', '', SW_SHOWNORMAL,ewNoWait,ErrorCode);
+		end;
+	end;
+
 	Result := true;

 	if Not RegQueryDWordValue(HKEY_LOCAL_MACHINE, 'SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64', 'Major', major) then
@@ -295,6 +295,7 @@ elif [ "$1" = "hot-patch" -o "$1" = "cold-patch" ] ; then
 	fi
 elif [ "$1" = "upgrade" ] ; then
 	@BINDIR@/unrealircd-upgrade-script $*
+	exit
 elif [ "$1" = "genlinkblock" ] ; then
 	@BINDIR@/unrealircd -L
 else
Author	SHA1	Message	Date
Bram Matthys	a0ae1a5a66	Update release notes header to conform to style	2022-05-03 11:45:58 +02:00
Bram Matthys	fc3711fcbe	Refer to UnrealIRCd 6 module api page from the UnrealIRCd 5 module api page.	2022-02-06 07:42:59 +01:00
Bram Matthys	6604856973	UnrealIRCd 5.2.4	2022-01-28 17:03:07 +01:00
Bram Matthys	0843ac64c0	Handle outdated version in the crash reporter: 1) Warn when >= July 1, 2022 that we only do security fixes (but continue the report) 2) Error when >= July 1, 2023 that all support ceased (do not send a report) 3) Handle HTTP 403 condition	2022-01-02 09:47:35 +01:00
Bram Matthys	5b3b50c084	Add variable declaration in innosetup file.	2021-12-29 20:09:59 +01:00
Bram Matthys	9ea7aebef2	Add link to UnrealIRCd 6 "what's new"	2021-12-29 15:29:00 +01:00
Bram Matthys	8f2e31f911	UnrealIRCd 5.2.3 This release will be put online at a later date, together with 6.0.1.	2021-12-29 12:18:02 +01:00
Bram Matthys	fb3becb30e	Make ./unrealircd upgrade work on FreeBSD as well (fix ported from U6)	2021-12-29 12:15:56 +01:00
k4bek4be	311cdc4639	Make CHATHISTORY not FAIL on a -H channel, sending empty history instead (#156 )	2021-12-19 10:41:54 +01:00
Bram Matthys	191ecc0e11	Fix EOL date, apparently I promised July and not June :D.	2021-12-15 07:12:09 +01:00
Bram Matthys	8584058a61	Update release notes a bit more [skip ci]	2021-12-13 19:02:08 +01:00
Bram Matthys	08afb5ce3a	Update release notes for 5.2.3 [skip ci]	2021-12-13 18:59:24 +01:00
musk	26ad4b48f7	Add example.es.conf (#187 )	2021-12-13 18:53:22 +01:00
Bram Matthys	fb0aeb14c0	Mention 6.x (already) as a supported version and mention U5 EOL date explicitly in this document as well. (Even though it already contains a reference to the EOL dates)	2021-12-13 18:49:56 +01:00
Val Lorentz	da34552027	Send nick!user@host in WALLOPS message from self.	2021-12-10 19:42:38 +01:00
Bram Matthys	de31964738	Update release notes [skip ci]	2021-12-06 17:50:51 +01:00
Bram Matthys	e1b3016426	Fix set::anti-flood::connect-flood not obeying the 'per XX seconds' configuration. It was always cleaning up old entries after 2 minutes. That is, until the first REHASH happened, after that the correct connect-flood setting was applied. In practice, with the default configuration, this means that instead of 3:60 it was 3:120 until the first REHASH, and after that 3:60. This was caused by update_throttling_timer_settings() being called before init_throttling().	2021-12-06 17:46:40 +01:00
Bram Matthys	343c4834ba	Add CONTRIBUTING.md file	2021-12-06 12:55:24 +01:00
Bram Matthys	59ac6b8218	This looks better. Less = more. [skip ci]	2021-12-06 12:29:18 +01:00
Bram Matthys	4a91f8c33a	Update release notes a bit more [skip ci]	2021-12-06 12:09:47 +01:00
Bram Matthys	ca9fa7c2cc	Update release notes a bit: dot dot dot [skip ci]	2021-12-06 12:04:46 +01:00
Bram Matthys	7d4cafd068	Bump version to 5.2.3-git and write some early release notes	2021-12-06 11:54:06 +01:00
Bram Matthys	fd81a98364	Add more warnings 3/6/9 months before EOL date (June 1, 2023) Just like we did in UnrealIRCd 4.	2021-12-06 11:40:20 +01:00
Bram Matthys	40161cad0c	Show EOL warning in 2023	2021-12-06 11:21:52 +01:00
Bram Matthys	14dadac9ff	Remove some confusing examples about extended server bans in (G)ZLINE. And also remove some references to old oper privilege flags. Reported by progval.	2021-12-03 16:07:47 +01:00
Bram Matthys	f65a2ba3d1	Backport fix for memory leak in websocket module.	2021-12-01 09:08:07 +01:00
Bram Matthys	22f5039180	Don't use slashes at start and end in SPAMFILTER example in HELPOP. Reported by srhuston in https://bugs.unrealircd.org/view.php?id=6002 [skip ci]	2021-12-01 09:03:20 +01:00
Ramiro Bou	a35b476b05	Sending WALLOPS back to the oper that issued it. (#159 )	2021-11-28 10:54:05 +01:00
Bram Matthys	dbdac4e304	UnrealIRCd 5.2.2	2021-10-03 15:59:13 +02:00
Bram Matthys	98fa3a63c8	Update release notes a bit more [skip ci]	2021-10-03 15:54:06 +02:00
Bram Matthys	8e3c3a1bd7	Also mention possible OpenBSD c-ares fix in release notes [skip ci]	2021-10-03 12:17:05 +02:00
Bram Matthys	d48acf638a	Update text a bit [skip ci]	2021-10-03 12:13:26 +02:00
Bram Matthys	82c8c9aed4	BuildBot: FreeBSD hangs with ASan enabled, in OPENSSL_init_ssl(), which calls qsort(). So disable it in the build tests (wtf?). [skip ci]	2021-10-03 12:12:47 +02:00
Bram Matthys	3715ae6789	Update release notes [skip ci]	2021-10-03 11:02:19 +02:00
Bram Matthys	a21168928f	Update shipped c-ares from 1.17.1 to 1.17.2 (10-aug-2021)	2021-10-03 10:37:03 +02:00
Bram Matthys	745f3fbb06	Update release notes, get ready for 5.2.2.	2021-10-03 10:33:14 +02:00
Bram Matthys	d2ef328147	Update curl-ca-bundle.crt to version of Thu Sep 30 03:12:05 2021 GMT from https://curl.se/ca/cacert.pem. Has a few changes, but the most notable change is that they removed DST Root CA X3. This fixes verifying Let's Encrypt certificates if you use the "DST Root CA X3" chain (which is currently the default in certbot and all) on: * OpenSSL 1.0.2 or earlier (old but in use on eg: Debian 8, Ubuntu 16.04, ..) * LibreSSL below 3.3.5/3.2.7 (so until a day ago) This only affects outgoing connections, so for remote includes and for server linking. Server linking is only affected if you use the link::verify-certificate option, which most people don't use. On a side note, ISRG Root X1, so the "real root" for Let's Encrypt is already included since August 2017 (`c8a67f9436`)	2021-10-03 10:13:40 +02:00
Bram Matthys	3feac27c43	Put arabic-utf8 in the correct group and #if out the hard errror when mixing UTF8 groups, make it a general warning again as it may or may not be an issue.	2021-09-22 09:31:47 +02:00
Bram Matthys	c51a3d96be	Add support for arabic-utf8 in set::allowed-nickchars. Supplied by Sensiva in https://bugs.unrealircd.org/view.php?id=3734	2021-09-22 09:20:19 +02:00
Bram Matthys	871b581a06	Module coders: add UNREAL_VERSION so you can more easily check UnrealIRCd versions in #ifdef's. Eg: #if UNREAL_VERSION > 0x05020100 to check if >5.2.1	2021-08-10 14:32:32 +02:00
Bram Matthys	41d8a13b19	Fix crash in set::server-linking::autoconnect-strategy sequential-fallback when a remote server links to another server.	2021-08-08 15:56:29 +02:00
Bram Matthys	0593dc4b73	Allow SVSLOGIN also if set::sasl-server is not set. Because yeah... why not.	2021-07-15 10:30:23 +02:00