summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-02-10Load the certificate chain rather than just the first certlinuxnet-8.1.20Russell King
As we are using LE certificates, we need to load the certificate chain rather than just the first certificate from the file.
2021-01-26Update lexer and parserRussell King
2020-11-19Fix build OpenSSL error in tools/respond.cRussell King
2020-11-19Update autoconf filesRussell King
2020-11-19Update libcap supportRussell King
2019-07-21m_operspyRussell King
2019-07-21update contrib modulesRussell King
2019-07-21Accept expired server certificatesRussell King
Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk>
2019-07-21Add CERTFP capabilityRussell King
Avoid sending CERTFP commands to servers which do not support this by adding a CERTFP capability.
2019-07-21Re-allow wildcarded hosts in connect blocksRussell King
Wildcarded host blocks allow us to permit a server to connect from unknown IPs, such as is used for ols.ca.linuxnet.org. This feature was broken when upgrading from the hybrid 8.0 to hybrid 8.1 code base. Fix this.
2019-07-21Fix CERTFP bugRussell King
CERTFP had the client and source reversed, which prevented it from accepting CERTFP messages from neighbours. Fix this.
2019-07-21Add initial support for client certificate fingerprintsRussell King
Networks such as Freenode and OFTC use client certificates to identify users and servers, not only for services, but also for server operator status and auth blocks. This allows us to use stronger certificates for authentication rather than passwords.
2019-07-21Initial libcap capability supportRussell King
2019-07-21Fix empty sockhostRussell King
Debatable whether this is the right fix or not - it looks like the NICK/UID parsing code never fills in sockhost for remote clients, despite receiving this information in the message from other servers.
2019-07-21Brand the ircd in the version string.Russell King
2019-07-21Configure operspy for linuxnetRussell King
2019-07-21Support 40 character nicks.Russell King
2019-07-21Add forcenick supportRussell King
2019-07-21Hide operspy moduleRussell King
2019-07-21Update operspy moduleRussell King
2019-07-21Add support for hidden command modulesRussell King
2019-07-21Add ^ support for SSL connectionsRussell King
2019-07-21Add support for limited temporary KlinesRussell King
2019-07-21Convert global channel operator support to OFTC's God mode.Russell King
OFTC's God mode is very similar to the global channel operator mode, with the following differences: - gaining God mode notifies all operators - uses of God mode privileges notifies all operators - God mode times out after a configurable period - uses umode S rather than O - S is taken for SSL clients in hybrid 8.1.13. So align with OFTC's implementation, but omit these features.
2019-07-21Add global channel operator supportRussell King
2016-06-12Add support for configurable initial channel modesRussell King
2016-06-12Fix empty sockhostRussell King
Whois code assumes that a sockhost containing "0" is unset. sockhost also gets used in inter-server UID messages. Allowing sockhost to remain empty is likely to cause protocol bugs elsewhere in ircd. Fill it with "0", which is what is used when spoofing is in use.
2016-06-12Add patch from Pie-Man to stop flooding connecting servers with 451 errorsRussell King
2016-06-12Add git ignore fileRussell King
2016-06-12Revert "- Dropped contrib/"Russell King
This reverts commit 206336e601c61264d4dd7b6c031b5cc96b7e3f44. Conflicts: Makefile.in configure
2016-06-12Revert "- numeric.h: removed unused RPL_HOSTHIDDEN numeric constant"Russell King
This reverts commit cd7c67bd776fd958c6caf10f05b5338dc9a762ee.
2014-07-20RELEASE TAG 8.1.20HEADmastermichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/releases/8.1.20@4292 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-20- Update several help filesmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4291 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-20- Revved version to hybrid-8.1.20michael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4290 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-20- Update doc/reference.confmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4289 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-20- m_oper.c, m_challenge.c: cosmetical fixesmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4286 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-19- m_challenge.c:m_challenge(): added sanity test on parv[1]michael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4281 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-19- Update NEWSmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4280 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-19- Update NEWSmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4279 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-19- m_challenge.c:m_challenge(): cosmetical fixmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4278 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-19- Update challenge.txtmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4277 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-19- m_xline.c, m_resv.c: fixed bug where the mask which is to be banned is ↵michael
checked in both valid_wild_card_simple() and valid_wild_card() git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4276 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-19- conf.c:valid_wild_card_simple(): don't read past the zero charactermichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4263 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-18- conf_parser.y: do some logging if the dh param file can't be opened/readmichael
- rsa.c: fixed compile warning git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4260 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-18- Cleaned up and sanitized /challenge relatedcodemichael
- rsa.c:get_randomness(): removed EGD support; also don't fall back to RAND_pseudo_bytes() if RAND_bytes() fails. If RAND_bytes() fails, just reject the /challenge request. git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4257 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-18- .travis.yml: according to the travis ci guys, gcc-4.8 is now pre-installed ↵michael
on osx. Let's see if it works this time. git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4252 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-17- Update NEWSmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4249 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-17- m_server.c: fixed build with LibreSSL which hasn't compression supportmichael
- ax_check_openssl.m4: 0.9.8m is now the minimum requirement git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4248 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-17- m_xline.c: fixed broken check_xline()michael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4243 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-14- Update ircd manpage [ci skip]michael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4220 82007160-df01-0410-b94d-b575c5fd34c7