summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2021-02-10Load the certificate chain rather than just the first certlinuxnet-8.1.20Russell King
As we are using LE certificates, we need to load the certificate chain rather than just the first certificate from the file.
2021-01-26Update lexer and parserRussell King
2020-11-19Update autoconf filesRussell King
2020-11-19Update libcap supportRussell King
2019-07-21Accept expired server certificatesRussell King
Signed-off-by: Russell King <rmk+kernel@armlinux.org.uk>
2019-07-21Add CERTFP capabilityRussell King
Avoid sending CERTFP commands to servers which do not support this by adding a CERTFP capability.
2019-07-21Re-allow wildcarded hosts in connect blocksRussell King
Wildcarded host blocks allow us to permit a server to connect from unknown IPs, such as is used for ols.ca.linuxnet.org. This feature was broken when upgrading from the hybrid 8.0 to hybrid 8.1 code base. Fix this.
2019-07-21Add initial support for client certificate fingerprintsRussell King
Networks such as Freenode and OFTC use client certificates to identify users and servers, not only for services, but also for server operator status and auth blocks. This allows us to use stronger certificates for authentication rather than passwords.
2019-07-21Initial libcap capability supportRussell King
2019-07-21Add support for hidden command modulesRussell King
2019-07-21Add ^ support for SSL connectionsRussell King
2019-07-21Add support for limited temporary KlinesRussell King
2019-07-21Convert global channel operator support to OFTC's God mode.Russell King
OFTC's God mode is very similar to the global channel operator mode, with the following differences: - gaining God mode notifies all operators - uses of God mode privileges notifies all operators - God mode times out after a configurable period - uses umode S rather than O - S is taken for SSL clients in hybrid 8.1.13. So align with OFTC's implementation, but omit these features.
2019-07-21Add global channel operator supportRussell King
2016-06-12Add support for configurable initial channel modesRussell King
2016-06-12Fix empty sockhostRussell King
Whois code assumes that a sockhost containing "0" is unset. sockhost also gets used in inter-server UID messages. Allowing sockhost to remain empty is likely to cause protocol bugs elsewhere in ircd. Fill it with "0", which is what is used when spoofing is in use.
2016-06-12Add patch from Pie-Man to stop flooding connecting servers with 451 errorsRussell King
2014-07-19- conf.c:valid_wild_card_simple(): don't read past the zero charactermichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4263 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-18- conf_parser.y: do some logging if the dh param file can't be opened/readmichael
- rsa.c: fixed compile warning git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4260 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-18- Cleaned up and sanitized /challenge relatedcodemichael
- rsa.c:get_randomness(): removed EGD support; also don't fall back to RAND_pseudo_bytes() if RAND_bytes() fails. If RAND_bytes() fails, just reject the /challenge request. git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4257 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-02- Removed supported.hmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4158 82007160-df01-0410-b94d-b575c5fd34c7
2014-07-02- Removed hooking systemmichael
- Update help/stats git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4157 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-29- conf.c:set_default_conf(): default to 1 connection per 1 secondmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4096 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-25- channel.c:check_splitmode(): logic fixesmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4064 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-24- conf.c:read_conf_files(): chanmodes c an M were missed in CHANMODESmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4052 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-19- AUTHORS, version.c: added Fawkes to contributorsmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@4007 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-18- version.c: fixed compile warning with clang -Winvalid-source-encoding. Fix ↵michael
provided by grawity. git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3992 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-06- conf_parser.y: fixed stupid bug that has successfully has hidden itself ↵michael
since Feb 5, 2002 git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3890 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-05- Update macros in m4/michael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3840 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-03- send.c:sendto_match_servs(): use DLINK_FOREACH_SAFE() as send_message_remote()michael
might exit client/server git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3802 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-02- conf.c:set_default_conf(): reset ConfigFileEntry.stats_e_disabledmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3781 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-01- hostmask.c:mask_addr(): fixed merging errormichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3772 82007160-df01-0410-b94d-b575c5fd34c7
2014-06-01- hostmask.c:mask_addr(): fiex compile warningsmichael
hostmask.c: In function ‘mask_addr’: hostmask.c:332:35: warning: declaration of ‘__v’ shadows a previous local [-Wshadow] hostmask.c:332:35: warning: shadowed declaration is here [-Wshadow] hostmask.c:332:35: warning: declaration of ‘__x’ shadows a previous local [-Wshadow] hostmask.c:332:35: warning: shadowed declaration is here [-Wshadow] git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3771 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-30- channel_mode.c:chm_simple(): channel halfops may now set +pmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3718 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-30- channel_mode.c:chm_hop(): channel halfops (%) may now no longer (de)halfop ↵michael
other channel members git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3712 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-30- irc-operators may now no longer set a channel +O if they are only halfops (%)michael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3709 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-30- channel_mode.c:chm_operonly(): removed dead codemichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3698 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-29- channel_mode.c: revert changes to channel_modes() for now. apparentlymichael
there are some other parts that rely on this odd behaviour. git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3690 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-29- channel_mode.c:channel_modes(): replaced sprintf with strcat;michael
use %u conversion specifier for unsigned ints git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3689 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-29- channel_mode.c:channel_modes(): fix to previous changesmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3684 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-29- channel_mode.c:channel_modes(): get rid of trailing spaces ifmichael
the channel is +k/+l git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3683 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-23- channel_mode.c:chm_operonly(): removed redundant assignmentmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3631 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-22- parse.c:mod_del_cmd(): make sure the command actually exists in the trie ↵michael
before attempting to remove it. We could end up in a corrupted trie otherwise. git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3616 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-16- conf_class.c:class_free(): added an assert()michael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3549 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-14- ircd.c:main(): make this "don't run ircd as root!!!11" message look more ↵michael
serious git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3527 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-10- conf.c:parse_aline(): use CONF_NOREASON for default reasonmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3501 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-01- Backported /list and hunt_server() optimization from TRUNKmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3462 82007160-df01-0410-b94d-b575c5fd34c7
2014-05-01- conf_parser.y: fixed bug where the parser wouldn't take time unitsmichael
into consideration for the join_flood_time and throttle_time config options. git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3433 82007160-df01-0410-b94d-b575c5fd34c7
2014-04-30- Fixed possible WATCH core. Fix provided by Adammichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3426 82007160-df01-0410-b94d-b575c5fd34c7
2014-04-15- Readded FLAGS_BLOCKEDmichael
git-svn-id: svn://svn.ircd-hybrid.org/svnroot/ircd-hybrid/branches/8.1.x@3310 82007160-df01-0410-b94d-b575c5fd34c7