| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Fixed Windows build.•••Squash commit of the following from 2.0:
commit cbd0b938d1e6a24c082fd510f3f6bb45a1ba3ce0
commit d392720f7fe4e3a85aec0f431b24d852d186d353
commit 30477f569bbd21590ad0687b5f09012deeb2b40e
commit 4707f65e75867e443cbab8a5dcb0379341537263
commit e37621e04ea3b80c6f57c89873e530506f8d5587
commit 92cac06fc2e4207614efe0292d6cdf2954ff30a9
Plus many additional 2.1 specific fixes.
|  Adam | 2012-06-06 | 1 | -4/+0 |
| * | Use socketengine functions for sending and receiving data instead of plain se... |  attilamolnar | 2012-05-28 | 1 | -2/+2 |
| * | Replace copyright headers with headers granting specific authors copyright.•••Fixes #61.
|  Robin Burchell | 2012-04-19 | 1 | -8/+19 |
| * | Revert "m_ssl_gnutls: use recommended DH bit sizes instead of user-specified ...•••This reverts commit 2b6b98bafe566874ea00abf4b0d35cd8cda5212f.
This uses API which is only available in gnutls 2.12.0, which is very new
(comparatively) - only released in march 2011 - and thus many distros will not
have had the opportunity to update yet, causing compile issues (see issue #49
for instance)
As this isn't really crucial, back it out, for the time being.
| Robin Burchell | 2012-04-14 | 1 | -3/+5 |
| * | m_ssl_gnutls: use recommended DH bit sizes instead of user-specified value |  Daniel De Graaf | 2012-03-22 | 1 | -5/+3 |
| * | m_ssl_gnutls: remove DH parameter generation•••While the gnutls documentation recommends that DH parameters be
regenerated, this does not actually improve security and may freeze the
ircd for a significant amount of time (50s in some reports). Remove it.
| Daniel De Graaf | 2012-03-22 | 1 | -22/+2 |
| * | Update copyright notices to 2011 |  Jackmcbarn | 2011-05-04 | 1 | -1/+1 |
| * | Remove inspsocket.h from inspircd.h | Jackmcbarn | 2011-01-30 | 1 | -5/+5 |
| * | Remove some gotos | Jackmcbarn | 2010-11-27 | 1 | -30/+31 |
| * | Improve GnuTLS socket error messages | Daniel De Graaf | 2010-10-02 | 1 | -2/+24 |
| * | A zero return from gnutls_record_send is not an error | Daniel De Graaf | 2010-09-19 | 1 | -7/+1 |
| * | Add C++ wrappers to more GnuTLS objects; remove the need to specify certcount | Daniel De Graaf | 2010-09-12 | 1 | -48/+153 |
| * | Move gnutls_dh_params into its own refcounted container object | Daniel De Graaf | 2010-09-11 | 1 | -19/+41 |
| * | Enable gnutls_only on pre-2.2 GnuTLS | Daniel De Graaf | 2010-09-06 | 1 | -2/+2 |
| * | Fix compilation on old (pre-2.2) versions of GnuTLS | Daniel De Graaf | 2010-09-06 | 1 | -0/+12 |
| * | Enable COMP-DEFLATE by default so that SSL connections are compressed | Daniel De Graaf | 2010-09-06 | 1 | -1/+1 |
| * | Allow enabling private GnuTLS extensions such as LZO compression | Daniel De Graaf | 2010-09-06 | 1 | -1/+7 |
| * | Allow GnuTLS cipher priorities to be set•••This adds <gnutls:prio> and <ssl_cert:prio> which allows you to enable
or disable ciphers, key exchange methods, macs, and compression methods
in SSL connections made using these certificates.
Examples from gnutls_priority_init(3):
"NORMAL:!AES-128-CBC" means normal ciphers except for AES-128.
"EXPORT:!VERS-TLS1.0:+COMP-DEFLATE" means that export ciphers are enabled, TLS 1.0 is disabled, and libz compression enabled.
"NONE:+VERS-TLS1.0:+AES-128-CBC:+RSA:+SHA1:+COMP-NULL"
| Daniel De Graaf | 2010-09-06 | 1 | -2/+10 |
| * | Clarify GnuTLS error messages on files not found | Daniel De Graaf | 2010-08-23 | 1 | -1/+12 |
| * | Clarify the configuration tag function names | Daniel De Graaf | 2010-08-22 | 1 | -3/+3 |
| * | Replace remaining Request users with dynamic_reference | Daniel De Graaf | 2010-08-21 | 1 | -11/+14 |
| * | Change config reading hook for better error reporting•••This eliminates the OnRehash hook, and replaces it with ReadConfig which
is called on boot, module load, and rehash.
| Daniel De Graaf | 2010-08-21 | 1 | -5/+2 |
| * | Get rid of more useless assign() invocations | Daniel De Graaf | 2010-08-03 | 1 | -1/+1 |
| * | Don't run gnutls_dh_params_generate so often | Daniel De Graaf | 2010-08-03 | 1 | -6/+7 |
| * | GnuTLS cleanup | Daniel De Graaf | 2010-08-03 | 1 | -35/+14 |
| * | New I/O hook API•••This removes some pointless Module:: entries, uses the ServiceProvider
lookup API for bind tags, and allows GnuTLS to use custom certificates
per bind or link block using:
<bind ssl="gnutls" ssl_cert="signed" ...>
<ssl_cert name="signed" certfile="my.cert.pem" keyfile="my.key.pem">
| Daniel De Graaf | 2010-08-03 | 1 | -430/+456 |
| * | Support multiple certificates in GnuTLS certificate chain•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12491 e03df62e-2008-0410-955e-edbf42e46eb7
|  danieldg | 2010-02-18 | 1 | -7/+16 |
| * | Allow STARTTLS to be disabled via <gnutls starttls="no">•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12485 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-02-17 | 1 | -2/+13 |
| * | Hide SSL= line of 005 if <gnutls:showports>/<openssl:showports> is false•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12484 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-02-17 | 1 | -11/+16 |
| * | Bug #645 was correct behavior on the client's part, the IRC STARTTLS standard...•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12480 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-02-16 | 1 | -6/+2 |
| * | Add <oper:autologin> to allow SSL fingerprint-based automatic oper login•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12467 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-02-15 | 1 | -1/+0 |
| * | Remove possible references to deleted User objects due to DNS lookups•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12445 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-02-12 | 1 | -5/+5 |
| * | Add random number generation functions to InspIRCd class.•••Default implementation uses libc random(), which can be better than rand().
If gnutls is loaded, gcrypt will be used to provide random numbers.
git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12404 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-02-09 | 1 | -0/+15 |
| * | Move configuration examples to docs, remove automatic overwrite on make install•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12383 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-02-06 | 1 | -2/+0 |
| * | Fix STARTTLS sending the 670 numeric within the SSL session, not prior to it•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12366 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-02-03 | 1 | -0/+9 |
| * | Allow SSL fingerprint hash to be specified, and show fingerprint to client on...•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12357 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-02-02 | 1 | -25/+26 |
| * | Put ConfigReader deprecation warning in logs•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12310 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-01-21 | 1 | -8/+6 |
| * | Add Module::init() for correct exception handling during hook registration•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12278 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-01-17 | 1 | -2/+9 |
| * | Make a ./configure --system to support system-wide installation of inspircd•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12275 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2010-01-17 | 1 | -3/+2 |
| * | ...because every now and again, i have to do a massive commit.•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12248 e03df62e-2008-0410-955e-edbf42e46eb7
|  brain | 2010-01-11 | 1 | -1/+1 |
| * | Use ServiceProvider for inter-module dependencies•••This will stop dependency chains from preventing module reloads when
it is not actually needed; however, it removes some failsafes that will
need to be reimplemented in order to avoid unmapped vtables.
This deprecates Request as an inter-module signaling mechanism, although
SQL still uses it.
git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12140 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2009-11-16 | 1 | -4/+3 |
| * | Remove Extensible parent from EventHandler•••This also fixes SSL certificate support when m_sslinfo is not loaded
git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12048 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2009-11-06 | 1 | -23/+20 |
| * | Move StreamSocket inheritance off of User•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12047 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2009-11-06 | 1 | -5/+5 |
| * | Clarify handshake failure messages•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12008 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2009-11-04 | 1 | -2/+1 |
| * | Fixes found by removing User inheritance from StreamSocket•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11975 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2009-10-25 | 1 | -9/+7 |
| * | Kill ListenSocketBase, use OnAcceptConnection for all new connections•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11950 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2009-10-21 | 1 | -6/+6 |
| * | Change module API to use LocalUser* where correct•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11943 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2009-10-21 | 1 | -1/+1 |
| * | More classbase cleanup, hold ConfigTag reference in Autoconnect/Link•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11906 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2009-10-18 | 1 | -1/+1 |
| * | Remove dummy API_VERSION from Version constructor•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11887 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2009-10-17 | 1 | -1/+1 |
| * | Remove magic path resolution from certificate files•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11868 e03df62e-2008-0410-955e-edbf42e46eb7
| danieldg | 2009-10-13 | 1 | -21/+4 |
Adam
attilamolnar
Robin Burchell
Daniel De Graaf
Jackmcbarn
danieldg
brain