summaryrefslogtreecommitdiff
path: root/src/modules/extra
AgeCommit message (Collapse)Author
2017-12-16Remove usage of deprecated API members in m_ssl_openssl.Peter Powell
Closes #1440.
2017-11-30Bump the minimum versions of GnuTLS to 2.0.0 and OpenSSL to 1.0.0.Peter Powell
Old TLS libraries should not be used anymore due to security risks.
2017-11-30Improve TLS security configuration in m_ssl_openssl.Peter Powell
- Always disable SSLv3. Unreal has already done this so clients will have to upgrade anyway. - Disable TLSv1.0 by default. Various security standards (e.g. PCI DSS) are already planning on sunsetting this so we should too.
2017-11-25Convert GenRandom to std::function.Peter Powell
2017-11-21Add the override keyword in places that it is missing.Peter Powell
GCCs warnings for this are much better than Clangs.
2017-11-13Unite SSL service providers and SSL profile classesAttila Molnar
2017-11-12Merge tag 'v2.0.25' into master.Peter Powell
2017-11-01Fix some SSL module issues.Peter Powell
- Use the same dhparams name in m_ssl_openssl as in other modules. - Fix building m_ssl_mbedtls.
2017-10-29Add support to IOHook for retrieving the hostname sent via SNI.Peter Powell
2017-10-21Add PackageInfo directives for Debian.Peter Powell
2017-10-18Clean up OnCleanup.Peter Powell
- Switch to using ExtensionItem::ExtensibleType for the type instead of TargetTypeFlags. - Pass the extensible to OnCleanup as an Extensible pointer instead of a void pointer. - Call OnCleanup for memberships as well as channels and users. - Rewrite event documentation to remove outdated references.
2017-10-15Update wiki links to use HTTPS and point to the correct pages.Peter Powell
When we release 3.0 these links will break as they will point to the pages for 3.0 rather than 2.0.
2017-10-12Fix a broken distro constraint in the m_ssl_gnutls PackageInfo.Peter Powell
2017-09-03Convert a bunch of time-related config options to getDuration.Peter Powell
2017-08-11Fix a broken distro constraint in the m_ssl_openssl PackageInfo.Peter Powell
2017-07-12Add CXX11_OVERRIDE to overridden members that lack it.Peter Powell
This fixes a ton of warnings when building on compilers that default to C++11 or newer.
2017-03-20m_ldapauth: fix providing username in PASSAdam
This has never worked because it never prepended attribute= to the search string. It also would prefer matching nick/ident over the user string provided which is inconsistent, since your ability to authenticate using PASS would depend on a ldap entry not existing with your current nick/ident. Instead, use username provided in PASS and then fallback to nick/ident.
2016-11-23Fix LibreSSL not having a shim for the OpenSSL 1.1 BIO API.Peter Powell
2016-10-25Fix OpenSSL build errors caused by BIO/BIO_METHOD now being opaque.Peter Powell
2016-09-16Add CentOS PackageInfoAdam
2016-09-16Merge pull request #1222 from SaberUK/master+warningsAttila Molnar
Fix various compiler warnings
2016-09-16Rewrite the build system directive parser.Peter Powell
2016-09-15Fix m_ldap warning about OpenLDAP being deprecated on OS X.Peter Powell
2016-09-15Fix m_geoip warning about the use of C++11 features.Peter Powell
2016-09-02Merge insp20Attila Molnar
2016-09-02Fix whitespace issuesAttila Molnar
2016-08-23Remove broken mssql moduleAttila Molnar
Issue #1006
2016-08-19Fix m_mysql warning about use of C++11 features on C++03.Peter Powell
NO_CLIENT_LONG_LONG was removed in a recent version of MySQL.
2016-08-19Fix m_ldap not linking to liblber on UNIX systems.Peter Powell
2016-08-19m_ldap Remove unused LDAPService::last_timeout_checkAttila Molnar
2016-08-17m_sqlite3 Fix possible memory leak when opening a database failsAttila Molnar
2016-08-17Merge insp20Attila Molnar
2016-08-10m_ssl_mbedtls Apply dummy CA workaround for client contextAttila Molnar
2016-08-08m_ssl_* Add option to sslprofile controlling whether to request client ↵Attila Molnar
certificates
2016-08-08Add StreamSocket::GetModHook() for obtaining the IOHook belonging to a given ↵Attila Molnar
module Use it to simplify logic in all modules using or providing IOHooks
2016-08-08Pass sendq to OnStreamSocketWriteAttila Molnar
2016-07-22m_ssl_openssl Verify DH params being non-NULL before setting it on the contextAttila Molnar
Fixes issue reported by @m4rkw on IRC
2016-06-21m_ssl_gnutls, m_ssl_openssl After a read schedule another read if data ↵Attila Molnar
remains in the buffer of the SSL library
2016-06-15Add mbedTLS SSL moduleAttila Molnar
2016-04-28Deduplicate code for on connect SSL ciphersuite NOTICE by moving it into ↵Attila Molnar
m_sslinfo
2016-04-28Export the GetCiphersuite() method from the SSL modulesAttila Molnar
2016-02-25Introduce Stats::Context, pass it to the OnStats hook and switch all code to itAttila Molnar
2016-02-22Merge insp20Attila Molnar
2016-02-20Fix GCC 6 warning about auto_ptr via a different method.Peter Powell
The previous method was causing build errors on CentOS and Solaris.
2016-02-19Fix warnings when building under GCC 6.Peter Powell
2016-02-11Update m_ssl_gnutls to use libgnutls-30 for gnutls 3.4Adam
2015-11-11m_ssl_gnutls Disable SSL v3 and when acting as a server enforce our cipher ↵Attila Molnar
preferences by default
2015-11-11m_ssl_gnutls Strip unrecognized tokens from the priority string if ↵Attila Molnar
configured to do so or when using the default
2015-11-11m_ssl_gnutls Add GnuTLS::Priority::GetDefault()Attila Molnar
2015-11-10m_ssl_gnutls Remove DH parameter generationAttila Molnar
Generating DH params like this blocked the main thread, significantly slowing down startup and it made /rehash ssl freeze the server until the generation finished. External tools such as our genssl should be used to generate DH params.
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-18 17:39:45 +0000