Age | Commit message (Collapse) | Author |
|
The 'crlfile' argument can point to a file that contains valid CRLs.
The 'crlpath' argument can point to a directory which contains CRLs,
albeit in OpenSSL's special hashed/symlink format. The 'crlmode' option
'chain' checks all certificates in the chain while the option 'leaf'
checks only the leaf certificate in a chain.
|
|
|
|
|
|
Closes #1430.
|
|
|
|
- Add constants for all of the used numerics.
- Switch RPL_CHANNELSMSG from 336 to 651 to avoid a conflict with
RPL_INVITELIST from ircd-hybrid.
- Switch RPL_WHOWASIP from 379 to 652 to avoid a conflict with
RPL_WHOISMODES from UnrealIRCd.
|
|
|
|
- Get rid of MakeHash and inline the logic into the actual handler.
- Return CMD_FAILURE when password hashing fails for some reason.
- Change the module name and description to be more accurate.
|
|
Closes #1264.
|
|
Closes #634.
|
|
Closes #466.
|
|
|
|
In the future we will have server linking modules that are not the
spanningtree module.
|
|
Fix m_cloaking umode desync
|
|
Old TLS libraries should not be used anymore due to security risks.
|
|
- Always disable SSLv3. Unreal has already done this so clients
will have to upgrade anyway.
- Disable TLSv1.0 by default. Various security standards (e.g.
PCI DSS) are already planning on sunsetting this so we should
too.
|
|
As far as I can tell this is not a problem as all ban masks are
canonicalised but its better to be safe than sorry.
|
|
Servers will now correctly show whether a remote user has +x or not.
|
|
|
|
|
|
|
|
GCCs warnings for this are much better than Clangs.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
This is causing problems such as duplicate 904 messages.
|
|
* Send to remote servers upon setting
* Send to halfop if available upon expiry
|
|
2.0: Inform the client when a SASL message cannot be sent
|
|
This replaces the devoice module which has now been removed. If you
want users to be able to devoice themselves then you can load the
customprefix module add the following config tag:
<customprefix name="voice" depriv="yes">
If you wish to keep identical behaviour rather than allowing users
to use "MODE #YourChannel -v TheirNick" then you can load the alias
module and add the following config tag:
<alias text="DEVOICE" format="#*" replace="MODE $2 -v $nick">
|
|
- Rework the code flow to be more readable.
- Ensure that the name is well formed.
- Allow prefix modes with a rank of zero.
|
|
|
|
|
|
When SASL is properly configured with a 'target' server, we are able
to inform the client when the message fails to send.
Currently if a target is configured and it is offline, no response is
sent. This can cause some clients to time out while waiting for a response.
If a target isn't configured, behaviour will not change with this commit.
The default of '*' will still send to all servers.
Updated example config with 'target' variable.
|
|
- Use the same dhparams name in m_ssl_openssl as in other modules.
- Fix building m_ssl_mbedtls.
|
|
This removes the need to do lookups in the cgiirc module. This is
useful as relying on gateways to do proper DNS checks is unreliable
and has resulted in issues like 5fc4403f62. Its more sane if we do
our own lookups.
This change has been okayed by multiple WEBIRC gateway authors so
I don't think it will cause many problems.
|
|
|
|
This removes the need to invalidate the cache after changing a
user's hostname.
|
|
|
|
|
|
|
|
The latter is more suited to the things we have previously been
using std::stringstream for.
|
|
|
|
- Switch to using ExtensionItem::ExtensibleType for the type instead
of TargetTypeFlags.
- Pass the extensible to OnCleanup as an Extensible pointer
instead of a void pointer.
- Call OnCleanup for memberships as well as channels and users.
- Rewrite event documentation to remove outdated references.
|
|
|
|
These being constant causes problems on older compilers that don't
elide the temporary copy when adding to the host list.
|