mirror of
https://github.com/unrealircd/unrealircd.git
synced 2026-07-09 01:43:12 +02:00
Bram Matthys
4d5e627b27
do with clients that use outdated SSL/TLS protocols (eg: TLSv1.0) and ciphers. The default settings are to warn in all cases: users connecting, opers /OPER'ing up and servers linking in. The user will see a message telling them to upgrade their IRC client. This should help with migrating such users, since in the future, say one or two years from now, we would want to change the default to only allow TSLv1.2+ with ciphers that provide Forward Secrecy. Instead of rejecting clients without any error message, this provides a way to warn them and give them some time to upgrade their outdated IRC client. https://www.unrealircd.org/docs/Set_block#set::outdated-tls-policy
37 lines
1.4 KiB
Plaintext
37 lines
1.4 KiB
Plaintext
UnrealIRCd 4.2.2-dev Release Notes
|
|
=================================
|
|
|
|
<<TODO>>
|
|
|
|
Enhancements:
|
|
* New set::outdated-tls-policy which describes what to do with clients
|
|
that use outdated SSL/TLS protocols (eg: TLSv1.0) and ciphers.
|
|
The default settings are to warn in all cases: users connecting,
|
|
opers /OPER'ing up and servers linking in. The user will see a message
|
|
telling them to upgrade their IRC client.
|
|
This should help with migrating such users, since in the future, say one
|
|
or two years from now, we would want to change the default to only allow
|
|
TSLv1.2+ with ciphers that provide Forward Secrecy. Instead of rejecting
|
|
clients without any error message, this provides a way to warn them and
|
|
give them some time to upgrade their outdated IRC client.
|
|
https://www.unrealircd.org/docs/Set_block#set::outdated-tls-policy
|
|
|
|
Major issues fixed:
|
|
|
|
Minor issues fixed:
|
|
* "link-security" was incorrectly downgraded from level 2 to 1 if spkifp
|
|
was used as an authentication method.
|
|
|
|
Deprecated:
|
|
|
|
Module coders:
|
|
|
|
Future versions:
|
|
* We intend to change the default plaintext oper policy from 'warn' to 'deny'
|
|
in the year 2019. This will deny /OPER when used from a non-SSL connection.
|
|
For security, IRC Operators should really use SSL/TLS!
|
|
|
|
==[ CHANGES IN OLDER RELEASES ]==
|
|
For changes in previous UnrealIRCd releases see doc/RELEASE-NOTES.old or
|
|
https://raw.githubusercontent.com/unrealircd/unrealircd/unreal40/doc/RELEASE-NOTES.old
|