aboutsummaryrefslogtreecommitdiff
path: root/src/modules/extra/m_ssl_openssl.cpp
Commit message (Expand)AuthorAgeFilesLines
* Bump the minimum versions of GnuTLS to 2.0.0 and OpenSSL to 1.0.0.•••Old TLS libraries should not be used anymore due to security risks. Gravatar Peter Powell2017-11-301-7/+2
* Improve TLS security configuration in m_ssl_openssl.•••- Always disable SSLv3. Unreal has already done this so clients will have to upgrade anyway. - Disable TLSv1.0 by default. Various security standards (e.g. PCI DSS) are already planning on sunsetting this so we should too. Gravatar Peter Powell2017-11-301-4/+3
* Unite SSL service providers and SSL profile classesGravatar Attila Molnar2017-11-131-19/+31
* Fix some SSL module issues.•••- Use the same dhparams name in m_ssl_openssl as in other modules. - Fix building m_ssl_mbedtls. Gravatar Peter Powell2017-11-011-1/+1
* Add support to IOHook for retrieving the hostname sent via SNI.Gravatar Peter Powell2017-10-291-0/+10
* Add PackageInfo directives for Debian.Gravatar Peter Powell2017-10-211-0/+1
* Clean up OnCleanup.•••- Switch to using ExtensionItem::ExtensibleType for the type instead of TargetTypeFlags. - Pass the extensible to OnCleanup as an Extensible pointer instead of a void pointer. - Call OnCleanup for memberships as well as channels and users. - Rewrite event documentation to remove outdated references. Gravatar Peter Powell2017-10-181-2/+2
* Fix a broken distro constraint in the m_ssl_openssl PackageInfo.Gravatar Peter Powell2017-08-111-1/+1
* Fix LibreSSL not having a shim for the OpenSSL 1.1 BIO API.Gravatar Peter Powell2016-11-231-1/+1
* Fix OpenSSL build errors caused by BIO/BIO_METHOD now being opaque.Gravatar Peter Powell2016-10-251-5/+45
* Add CentOS PackageInfoGravatar Adam2016-09-161-0/+1
* Rewrite the build system directive parser.Gravatar Peter Powell2016-09-161-3/+6
* Merge insp20Gravatar Attila Molnar2016-08-171-1/+7
|\
| * m_ssl_openssl Verify DH params being non-NULL before setting it on the context•••Fixes issue reported by @m4rkw on IRC Gravatar Attila Molnar2016-07-221-4/+11
| * m_ssl_gnutls, m_ssl_openssl After a read schedule another read if data remain...Gravatar Attila Molnar2016-06-211-1/+8
* | m_ssl_* Add option to sslprofile controlling whether to request client certif...Gravatar Attila Molnar2016-08-081-1/+10
* | Add StreamSocket::GetModHook() for obtaining the IOHook belonging to a given ...•••Use it to simplify logic in all modules using or providing IOHooks Gravatar Attila Molnar2016-08-081-8/+4
* | Pass sendq to OnStreamSocketWriteGravatar Attila Molnar2016-08-081-2/+1
* | Deduplicate code for on connect SSL ciphersuite NOTICE by moving it into m_ss...Gravatar Attila Molnar2016-04-281-22/+0
* | Export the GetCiphersuite() method from the SSL modulesGravatar Attila Molnar2016-04-281-1/+3
* | m_ssl_openssl Disable compression and SSL v3 by defaultGravatar Attila Molnar2015-11-101-2/+2
* | m_ssl_openssl Add workaround for a memory leak in OpenSSLGravatar Attila Molnar2015-11-101-1/+9
* | m_ssl_openssl Implement custom BIO methods that call SocketEngine methodsGravatar Attila Molnar2015-07-071-3/+86
* | m_ssl_openssl Remove NULL check of the session in OpenSSLIOHook constructorGravatar Attila Molnar2015-07-071-2/+0
* | m_ssl_openssl Use SSL_MODE_RELEASE_BUFFERS if availableGravatar Attila Molnar2015-07-061-1/+6
* | m_ssl_openssl Enable ECDH when acting as a server on OpenSSL 1.0.0 and laterGravatar Attila Molnar2015-07-061-0/+5
* | m_ssl_openssl Unconditionally compile code for detecting renegotiation and di...Gravatar Attila Molnar2015-07-061-9/+1
* | m_ssl_gnutls, m_ssl_openssl Log library version information on loadGravatar Attila Molnar2015-06-221-0/+2
* | Call OnStreamSocketWrite() once per write event•••Do sendq flattening in SSL modules, move code for it into class SSLIOHook from core Gravatar Attila Molnar2015-06-061-3/+8
* | Add max outgoing record size option to sslprofile configGravatar Attila Molnar2015-06-061-0/+6
* | Convert all code to use StreamSocket::SendQueue•••Let OnStreamSocketWrite see the entire sendq instead of one element at a time Gravatar Attila Molnar2015-06-061-2/+4
* | Merge insp20Gravatar Attila Molnar2015-05-101-0/+14
|\|
* | m_ssl_openssl Remove OpenSSLIOHook::outbound and is_outbound constructor para...Gravatar Attila Molnar2015-03-051-5/+3
* | m_ssl_openssl Specify TLS client/server role on session creation, switch to S...Gravatar Attila Molnar2015-03-051-11/+14
* | m_ssl_gnutls, m_ssl_openssl Deduplicate Handshake() calling codeGravatar Attila Molnar2015-03-051-25/+23
* | m_ssl_gnutls, m_ssl_openssl Simplify status handling in IOHook read/write han...•••Remove states ISSL_CLOSING and ISSL_CLOSED from m_ssl_gnutls Gravatar Attila Molnar2015-03-051-8/+3
* | m_ssl_gnutls, m_ssl_openssl Simplify Handshake() result handlingGravatar Attila Molnar2015-03-051-21/+13
* | m_ssl_gnutls, m_ssl_openssl Prepend TLS protocol version to ciphersuite stringGravatar Attila Molnar2015-01-271-0/+1
* | m_ssl_gnutls, m_ssl_openssl Extract code that builds a ciphersuite string int...Gravatar Attila Molnar2015-01-271-1/+8
* | Reduce std::string::substr() usage•••substr() returns a new string while erase() and assign() modify the existing one Gravatar Attila Molnar2015-01-101-1/+1
* | Fix warnings in m_ssl_openssl about the use of `long long` on C++03.Gravatar Peter Powell2014-12-071-0/+7
* | Merge insp20Gravatar Attila Molnar2014-10-271-8/+147
|\|
| * Remove some dead code found by CoverityGravatar Attila Molnar2014-10-261-3/+1
| * m_ssl_openssl Add compile time option that allows disabling renegotiationsGravatar Attila Molnar2014-10-201-0/+61
| * m_ssl_openssl Add compile time option to enable ECDHGravatar Attila Molnar2014-10-201-0/+36
| * Initialize all fields of issl_session on module load in SSL modulesGravatar Attila Molnar2014-10-161-0/+2
| * Add interface to SSL modules that allows other modules to obtain the raw SSL ...Gravatar Attila Molnar2014-10-161-0/+6
| * m_ssl_openssl Fix debug messageGravatar Attila Molnar2014-10-151-1/+1
| * m_ssl_openssl Reset data_to_write for new sessionsGravatar Attila Molnar2014-10-151-0/+2
| * m_ssl_openssl Free the ssl_cert object as soon as the session is closed inste...Gravatar Attila Molnar2014-10-151-1/+1
generated by cgit v1.3.1-10-gc9f91 (git 2.54.0) at 2026-07-11 17:50:08 +0000