Age | Commit message (Collapse) | Author |
|
As we are using LE certificates, we need to load the certificate chain
rather than just the first certificate from the file.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk>
|
|
Avoid sending CERTFP commands to servers which do not support this
by adding a CERTFP capability.
|
|
Wildcarded host blocks allow us to permit a server to connect from
unknown IPs, such as is used for ols.ca.linuxnet.org. This feature
was broken when upgrading from the hybrid 8.0 to hybrid 8.1 code
base. Fix this.
|
|
CERTFP had the client and source reversed, which prevented it from
accepting CERTFP messages from neighbours. Fix this.
|
|
Networks such as Freenode and OFTC use client certificates to identify
users and servers, not only for services, but also for server operator
status and auth blocks.
This allows us to use stronger certificates for authentication rather
than passwords.
|
|
|
|
Debatable whether this is the right fix or not - it looks like the
NICK/UID parsing code never fills in sockhost for remote clients,
despite receiving this information in the message from other servers.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
OFTC's God mode is very similar to the global channel operator mode,
with the following differences:
- gaining God mode notifies all operators
- uses of God mode privileges notifies all operators
- God mode times out after a configurable period
- uses umode S rather than O - S is taken for SSL clients in
hybrid 8.1.13.
So align with OFTC's implementation, but omit these features.
|
|
|
|
|
|
Whois code assumes that a sockhost containing "0" is unset. sockhost
also gets used in inter-server UID messages. Allowing sockhost to
remain empty is likely to cause protocol bugs elsewhere in ircd. Fill
it with "0", which is what is used when spoofing is in use.
|
|
|
|
|
|
This reverts commit 206336e601c61264d4dd7b6c031b5cc96b7e3f44.
Conflicts:
Makefile.in
configure
|
|
This reverts commit cd7c67bd776fd958c6caf10f05b5338dc9a762ee.
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/releases/8.1.20@4292 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4291 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4290 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4289 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4286 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4281 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4280 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4279 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4278 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4277 82007160-df01-0410-b94d-b575c5fd34c7
|
|
checked in
both valid_wild_card_simple() and valid_wild_card()
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4276 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4263 82007160-df01-0410-b94d-b575c5fd34c7
|
|
- rsa.c: fixed compile warning
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4260 82007160-df01-0410-b94d-b575c5fd34c7
|
|
- rsa.c:get_randomness(): removed EGD support; also don't fall back to RAND_pseudo_bytes()
if RAND_bytes() fails. If RAND_bytes() fails, just reject the /challenge request.
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4257 82007160-df01-0410-b94d-b575c5fd34c7
|
|
on osx.
Let's see if it works this time.
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4252 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4249 82007160-df01-0410-b94d-b575c5fd34c7
|
|
- ax_check_openssl.m4: 0.9.8m is now the minimum requirement
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4248 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4243 82007160-df01-0410-b94d-b575c5fd34c7
|
|
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4220 82007160-df01-0410-b94d-b575c5fd34c7
|