Commit graph

  • 8a29e7cd1e
    librb: shutdown() listening sockets pending close() so that listeners can be reopened reliably Simon Arlott 2016-04-30 11:15:03 +01:00
  • c767c58b2a
    opm: use rb_dlinkDelete instead of rb_dlinkFindDelete. Elizabeth Myers 2016-04-30 01:58:42 -05:00
  • 49fd293f20
    authd: change to lists instead of dictionaries for various things Elizabeth Myers 2016-04-30 01:56:06 -05:00
  • d71787ab69 librb: rb_path_to_self(): use sysctl(2) interface on freebsd/dragonfly William Pitcock 2016-04-30 01:18:42 -05:00
  • e7c4ecd5b1
    authproc: don't delete during iteration, this is not safe. Elizabeth Myers 2016-04-30 01:11:08 -05:00
  • a2bfe0f88e librb: linebuf: don't reinvent rb_dlinkAddTailAlloc(). William Pitcock 2016-04-30 00:58:39 -05:00
  • 9f7f75295c
    authd: don't try to do anything on exit, it's too precarious Elizabeth Myers 2016-04-30 00:46:18 -05:00
  • 5a775221d2 tools: fix stub rb_strcasecmp() build William Pitcock 2016-04-29 19:52:19 -05:00
  • b5f3e5e5e8 ircd: Channel.bants is not a serial but a timestamp. William Pitcock 2016-04-29 18:59:32 -05:00
  • ff0414c856 librb: close FDs when they're freed (outside of select handler) Simon Arlott 2016-04-28 22:00:54 +01:00
  • fed4fc59bc
    Mention another RFC with regard to deprecating plaintext Aaron Jones 2016-04-29 16:28:18 +00:00
  • cf12678be5
    [openssl] More improvements to the backend Aaron Jones 2016-04-29 16:26:52 +00:00
  • f9014791da
    openssl: set ciphers on client connections too Simon Arlott 2016-04-29 07:42:12 +01:00
  • 1cdf323be9
    sslproc: don't send updated config to dead/shutdown sslds Simon Arlott 2016-04-29 07:35:43 +01:00
  • 036cafaaaf
    sslproc: reset ssld_wait/spin_count when explicitly requested to restart ssld Simon Arlott 2016-04-28 22:22:37 +01:00
  • 6a7ea191a7
    [mbedtls] correct printf argument count Aaron Jones 2016-04-27 22:11:19 +00:00
  • b28c26d965
    Partially revert previous commit Aaron Jones 2016-04-27 21:49:55 +00:00
  • e3760ba710
    [TLS backends] Miscellaneous fixes Aaron Jones 2016-04-27 21:43:54 +00:00
  • d6acb43769
    openssl: don't allow certificates outside the validity period Simon Arlott 2016-04-27 22:03:49 +01:00
  • c53b6ef2cc
    epoll: don't try to read from closed FDs Simon Arlott 2016-04-27 21:16:29 +01:00
  • b1f0549361
    [openssl] support ECDHE on more than one curve when possible Aaron Jones 2016-04-27 16:17:33 +00:00
  • f590c59d5c
    mkfingerprint: use certfp method names from certfp.h Simon Arlott 2016-04-26 20:58:16 +01:00
  • 0346918701
    add mkfingerprint program Simon Arlott 2016-04-26 20:21:23 +01:00
  • f018ed844d
    certfp: Move method name/prefix strings to a separate header file Simon Arlott 2016-04-26 20:19:59 +01:00
  • 31646e89ba
    librb: gnutls: check return value of fread() Simon Arlott 2016-04-26 20:28:12 +01:00
  • 7380ded584
    ircd.conf.example: use certfp_method = spki_sha256 Simon Arlott 2016-04-25 23:52:18 +01:00
  • 5adde7a4ed
    getopt: don't modify argv as it breaks restart() Simon Arlott 2016-04-25 23:21:38 +01:00
  • c173a8ad44
    modules: use exit(EXIT_FAILURE) on failure Simon Arlott 2016-04-25 22:27:57 +01:00
  • 762468f85d
    authd: wait until the ssl connection is "open" before reading Simon Arlott 2016-04-25 21:35:58 +01:00
  • 53789fddda
    sslproc: simplify ssl open callback Simon Arlott 2016-04-25 21:12:44 +01:00
  • e1f16ce22e
    openssl: accept more certificate verify errors as valid Simon Arlott 2016-04-25 20:38:33 +01:00
  • f61d096186
    conf: require certificate fingerprint for SSL connections Simon Arlott 2016-04-25 20:19:48 +01:00
  • dc986b5468
    sslproc: prefix SPKI certfp types to distinguish them from CERT Simon Arlott 2016-04-25 20:12:27 +01:00
  • 93ad89b232
    sslproc: send the certftp method on rehash Simon Arlott 2016-04-25 19:22:10 +01:00
  • f7b0c4b3d8
    sslproc: use global ServerInfo configuration Simon Arlott 2016-04-25 19:20:45 +01:00
  • 90fd6ede1b
    sslproc: include ssl_cipher_list in length check before sending configuration to ssld Simon Arlott 2016-04-25 19:12:47 +01:00
  • 19d1853f71
    ssld: remove init_prng command Simon Arlott 2016-04-25 19:02:03 +01:00
  • 8cbd70a8ed
    ircd: don't send ERR_NOTREGISTERED to servers Simon Arlott 2016-04-24 17:41:44 +01:00
  • 5ad62c80ee
    librb: remove socklen parameter from rb_connect_tcp Simon Arlott 2016-04-24 17:11:20 +01:00
  • d4214e9445
    ircd: server connection configuration Simon Arlott 2016-04-24 17:05:05 +01:00
  • 65f43a4fc4
    ircd: Don't try to connect to servers that we know have an invalid fingerprint Simon Arlott 2016-04-24 11:49:21 +01:00
  • 4fbb736202
    ssld: add a callback when the connection is opened Simon Arlott 2016-04-24 11:48:35 +01:00
  • fbbc6aeb00
    ssld: send cipher/certfp before proxying any plaintext traffic Simon Arlott 2016-04-24 10:39:16 +01:00
  • 3085734104
    m_stats: display certificate fingerprint in STATS C Simon Arlott 2016-04-24 00:29:11 +01:00
  • 00039dcddd
    m_alias: store a copy of alias->name as it will be freed on a rehash Simon Arlott 2016-04-24 00:09:12 +01:00
  • 5c317f1313
    ircd: parse: add asserts for improper use of mod_add_cmd/mod_del_cmd Simon Arlott 2016-04-23 23:56:41 +01:00
  • e8de2bfaf0
    modules: add missing break Simon Arlott 2016-04-23 23:35:27 +01:00
  • 558744e520
    ircd: do nothing in client_release_connids if !MyConnect Simon Arlott 2016-04-23 23:25:25 +01:00
  • cc02bdf3a6
    ircd: fix assert in client_release_connids Simon Arlott 2016-04-23 23:21:47 +01:00
  • cf430c1a40
    ssld: Add new certfp_methods spki_sha256 and spki_sha512 Simon Arlott 2016-04-23 22:51:05 +01:00
  • 9e98a842e3
    ssld: cipher commands don't have any fds Simon Arlott 2016-04-23 22:46:25 +01:00
  • 7da82465a8
    librb: mbedtls: fix rb_get_ssl_certfp() Simon Arlott 2016-04-23 22:45:13 +01:00
  • bf3bcbb5b2
    librb: fix mbedtls library order Simon Arlott 2016-04-23 22:13:03 +01:00
  • 0ae7a89d78
    ircd: sslproc: certfp commands have a 9 byte header, not 5 bytes Simon Arlott 2016-04-23 20:52:20 +01:00
  • 5a9fa2e2fa
    ssld: certfp change commands don't have any fds Simon Arlott 2016-04-23 20:46:26 +01:00
  • c6098ed357 client: fix up client_release_connids() too, pointed out by lp0 William Pitcock 2016-04-23 14:26:01 -05:00
  • 5c63bfe8b1 client: connid_get() should check MyConnect(), not MyClient(). William Pitcock 2016-04-23 14:17:09 -05:00
  • 84e3e445aa
    mr_server: Report certificate fingerprint mismatches Simon Arlott 2016-04-23 17:32:24 +01:00
  • b49efe577c
    mr_server: Handle unknown error codes Simon Arlott 2016-04-23 17:30:59 +01:00
  • 3bb3dcf7f5
    doc: fix whitespace in example configs [ci skip] Mantas Mikulėnas 2016-04-23 17:57:07 +03:00
  • e7c4cf63bc
    authproc: set GOT_ID flag when an ident response is received Simon Arlott 2016-04-23 15:41:27 +01:00
  • 1729f46eab
    authd: Avoid negative array indices staticfox 2016-04-22 23:06:42 -04:00
  • 7445ece1d1
    Revert "Implement the netsplit batch type." Elizabeth Myers 2016-04-16 11:05:00 -05:00
  • 2373891299
    Implement the netsplit batch type. Elizabeth Myers 2016-04-15 16:50:43 -05:00
  • 4f2b9a4fd1
    Don't use key member of dictionary iter objects after deletion Elizabeth Myers 2016-04-12 09:43:50 -05:00
  • 9e5c31ea0d
    authproc: fix a typo Elizabeth Myers 2016-04-12 09:37:56 -05:00
  • 5e9a3f8674
    Change the way authd configures opm Elizabeth Myers 2016-04-12 09:33:51 -05:00
  • 5eb8ce0679 Merge pull request #183 from grawity/sasl-fail-throttle-v3 Mantas Mikulėnas 2016-04-11 22:28:33 +03:00
  • 9d07a42d7a
    m_sasl: rate-limit SASL REAUTH usage Mantas Mikulėnas 2016-04-11 21:38:43 +03:00
  • 834579cecd
    m_sasl: fix coding style Mantas Mikulėnas 2016-04-11 20:12:31 +03:00
  • 37289346cd
    m_sasl: temporarily reject clients after many failed attempts Mantas Mikulėnas 2015-02-13 20:13:06 +02:00
  • ed5e1d1e41 send: trim a blank line [ci skip] Elizabeth Myers 2016-04-11 11:51:51 -05:00
  • a2b7ef92a1 Make directions more clear for disabling OPM Elizabeth Myers 2016-04-11 11:26:15 -05:00
  • c9b6f58349 Name the fallback strncasecmp properly [ci skip] Elizabeth Myers 2016-04-10 17:28:20 -05:00
  • ea3168fff8 whoops, fix a typo Elizabeth Myers 2016-04-10 17:26:09 -05:00
  • 8b813d3060 Replace my shitty fallbacks with those from FreeBSD Elizabeth Myers 2016-04-10 17:25:32 -05:00
  • 3eb5fee4f1 README: put git command in backticks [ci skip] Elizabeth Myers 2016-04-10 17:15:46 -05:00
  • efc4b18c78 *sigh* comment these out until travis is fixed. Elizabeth Myers 2016-04-10 17:11:57 -05:00
  • c5514ce8ee Add these for now until travis actually gets their shit together. Elizabeth Myers 2016-04-10 17:07:33 -05:00
  • 571b7239ab travis: install shtool. Elizabeth Myers 2016-04-10 16:53:40 -05:00
  • 238db37776 Get rid of install-sh and use shtoolize to create them. Elizabeth Myers 2016-04-10 16:49:42 -05:00
  • e34368b1bc modules/m_set: booleanify. Elizabeth Myers 2016-04-10 10:11:03 -05:00
  • 9af0d38291 librb: minor adjustments to rb_strcasestr fallback to avoid warnings. Elizabeth Myers 2016-04-10 10:10:46 -05:00
  • 7a21fb5b34 s_user: clean up authd checks Elizabeth Myers 2016-04-10 10:02:33 -05:00
  • 2a104d6641 s_user: enhancements to proxy reporting messages Elizabeth Myers 2016-04-10 09:35:02 -05:00
  • ce58d2dc61 Remove extraneous whitespace [ci skip] Elizabeth Myers 2016-04-10 09:23:14 -05:00
  • d19aab3375 Fix stupid linux warning Elizabeth Myers 2016-04-10 09:22:34 -05:00
  • 154dc91ef0 Wrap up authd preclient stuff in its own struct Elizabeth Myers 2016-04-10 09:20:51 -05:00
  • 02fa4362cd version.c.SH: Fix build staticfox 2016-04-09 06:05:08 -04:00
  • b14d2bd6ea Formatting fixes for credits Elizabeth Myers 2016-04-09 04:54:56 -05:00
  • b376d0fd46 Properly clean up build artifacts. Elizabeth Myers 2016-04-08 10:33:36 -05:00
  • 4eafa9e62f ipv4_from_ipv6: move to librb Elizabeth Myers 2016-04-08 03:49:23 -05:00
  • 0807c97e69 elide messages about not checking blacklists or scanning for proxies Elizabeth Myers 2016-04-07 09:45:12 -05:00
  • 5a22e9259b Fix overzealotry in flags fixing. Elizabeth Myers 2016-04-07 07:48:50 -05:00
  • 66f7fe673b Get rid of flags2. Elizabeth Myers 2016-04-07 07:40:55 -05:00
  • 9057170ce8 Cleanup defaults.h config file. Elizabeth Myers 2016-04-07 04:47:48 -05:00
  • e791dc6d5e NEWS: add some more relevant items [ci skip] Elizabeth Myers 2016-04-07 04:47:31 -05:00
  • 7cc09379ac NEWS: move news element down to code changes [ci skip] Elizabeth Myers 2016-04-07 04:21:16 -05:00
  • d1478ff205 NEWS: add module changes Elizabeth Myers 2016-04-07 04:19:24 -05:00
  • 0a87075b86 modules: fix up display names Elizabeth Myers 2016-04-07 04:15:12 -05:00