]>
jfr.im git - solanum.git/log
William Pitcock [Mon, 23 Mar 2015 02:08:05 +0000 (21:08 -0500)]
cap: missed a spot on =sticky caps removal
William Pitcock [Sun, 22 Mar 2015 21:41:47 +0000 (16:41 -0500)]
ircd manpage: remove references to ircd.conf(5) (closes #91)
William Pitcock [Sun, 22 Mar 2015 21:36:04 +0000 (16:36 -0500)]
Merge pull request #90 from aaronmdjones/master
Update ciphersuite string to prohibit RC4
Aaron Jones [Sun, 22 Mar 2015 06:14:39 +0000 (06:14 +0000)]
Update ciphersuite string to prohibit RC4
This is in accordance with RFC 7465
<https://tools.ietf.org/html/rfc7465>
Also correct the key exchange mechanism strings; these should be
prefixed with 'k'.
PrgmrBill [Tue, 17 Mar 2015 20:39:25 +0000 (16:39 -0400)]
Updates format to match help/users/umode
Instead of adding a new section I made it look like the example from help/users/umode.
PrgmrBill [Tue, 17 Mar 2015 19:19:14 +0000 (15:19 -0400)]
Adds a new section for extension channel modes
Adds new section - "FROM EXTENSIONS". These channel modes may not be available if the related extension is not loaded.
PrgmrBill [Tue, 17 Mar 2015 19:06:56 +0000 (15:06 -0400)]
Wraps long lines + adds TLS
- Fixes long line by wrapping
- Adds TLS as charybdis now has SSL_OP_NO_SSLv3
PrgmrBill [Tue, 17 Mar 2015 18:57:55 +0000 (14:57 -0400)]
Adds SSL only channel mode
Adds +S channel mode - Only users connected via SSL may join the channel while this mode is set. Users already in the channel are not affected.
William Pitcock [Tue, 10 Mar 2015 13:21:46 +0000 (08:21 -0500)]
cap: sasl is now enforced as sticky again
William Pitcock [Tue, 10 Mar 2015 13:20:03 +0000 (08:20 -0500)]
cap: chase ircv3.2 interpretation of sticky/ack-required caps (basically dropping support other than serverside enforcement of stickyness)
change request @ ircv3/ircv3-specifications#122
William Pitcock [Mon, 9 Mar 2015 00:22:49 +0000 (19:22 -0500)]
Merge pull request #86 from rnjohnson18/patch-1
Change example.conf to ircd.conf.example
rnjohnson18 [Mon, 9 Mar 2015 00:16:36 +0000 (19:16 -0500)]
Change example.conf to ircd.conf.example
William Pitcock [Sun, 8 Mar 2015 20:26:31 +0000 (15:26 -0500)]
charybdis 3.5.0 rc1.
Mantas Mikulėnas [Fri, 6 Mar 2015 15:19:16 +0000 (17:19 +0200)]
sasl: reformat the other messages consistently
Mantas Mikulėnas [Fri, 6 Mar 2015 15:18:54 +0000 (17:18 +0200)]
sasl: adjust 'H' message following commit
7d33cce8efb
Jilles Tjoelker [Sun, 1 Mar 2015 22:46:20 +0000 (23:46 +0100)]
Fix some compiler warnings about signed/unsigned comparison.
Jilles Tjoelker [Sun, 1 Mar 2015 15:12:12 +0000 (16:12 +0100)]
conf: Correct message when serverinfo::nicklen is set too low (<9).
Jilles Tjoelker [Sun, 1 Mar 2015 14:00:52 +0000 (15:00 +0100)]
cap-notify: Fix possible crash on 64-bit systems.
find_named_client() was called without a prototype and therefore the
pointer could be truncated.
Jilles Tjoelker [Sun, 1 Mar 2015 13:53:40 +0000 (14:53 +0100)]
send: sendto_local_clients_with_capability() needn't use serial
sendto_local_clients_with_capability() sends to a subset of the list of
local clients and cannot visit the same client multiple times like
sendto_channel_flags() and sendto_common_channels_local() can.
Max Teufel [Sun, 1 Mar 2015 08:59:27 +0000 (09:59 +0100)]
m_cap: do not allow sasl CAP when the agent is offline
William Pitcock [Sun, 1 Mar 2015 07:09:34 +0000 (01:09 -0600)]
charybdis 3.5.0-test1.
William Pitcock [Sun, 1 Mar 2015 07:06:58 +0000 (01:06 -0600)]
config: further EGD removal
William Pitcock [Sun, 1 Mar 2015 07:05:14 +0000 (01:05 -0600)]
libratbox: remove RB_PRNG_EGD in its entirety (closes #85)
William Pitcock [Sun, 1 Mar 2015 06:58:40 +0000 (00:58 -0600)]
cap-notify: implement cap-notify for sasl service (closes #84)
William Pitcock [Sun, 1 Mar 2015 06:44:34 +0000 (00:44 -0600)]
cap-notify: add sendto_local_clients_with_capability() (ref #84)
William Pitcock [Sun, 1 Mar 2015 06:26:23 +0000 (00:26 -0600)]
cap-notify: add cap-notify cap
William Pitcock [Sun, 1 Mar 2015 06:22:50 +0000 (00:22 -0600)]
sasl: making the sasl capability actually sticky seems incompatible with broken implementations, so we make it just a formality instead.
William Pitcock [Sun, 1 Mar 2015 06:01:24 +0000 (00:01 -0600)]
sasl: fix null deref on remote client exit
William Pitcock [Sat, 28 Feb 2015 07:12:25 +0000 (01:12 -0600)]
sasl: ircv3 wg decided sasl capability should be sticky (ref ircv3/ircv3-specifications#103)
Max Teufel [Sat, 28 Feb 2015 07:06:38 +0000 (01:06 -0600)]
src/channel: add support for IRCv3.2 userhost-in-names
William Pitcock [Sat, 28 Feb 2015 07:01:08 +0000 (01:01 -0600)]
cap: remove SASL_REAUTH capability
William Pitcock [Sat, 28 Feb 2015 06:48:43 +0000 (00:48 -0600)]
sasl: allow reauth without sasl-reauth capability (since it's being dropped)
William Pitcock [Wed, 25 Feb 2015 02:32:08 +0000 (20:32 -0600)]
move README to markdown.
William Pitcock [Wed, 25 Feb 2015 02:25:34 +0000 (20:25 -0600)]
remove references to LIBPATH (closes #26).
William Pitcock [Wed, 18 Feb 2015 18:35:34 +0000 (12:35 -0600)]
ircd.conf.example: explain DH parameters size better (closes #68)
William Pitcock [Wed, 18 Feb 2015 18:29:57 +0000 (12:29 -0600)]
Merge pull request #82 from grawity/sasl-send-conn-info
m_sasl: send information about the client connection
William Pitcock [Mon, 16 Feb 2015 23:50:51 +0000 (17:50 -0600)]
Revert "m_invite: add support for CAP invite-notify"
This reverts commit
93eb76cc323f9b1219c86ac9b360e00ea215388f .
William Pitcock [Mon, 16 Feb 2015 23:40:25 +0000 (17:40 -0600)]
libratbox/gnutls: call gnutls_rnd_refresh() to ensure our PRNG is initialized
William Pitcock [Mon, 16 Feb 2015 21:57:14 +0000 (15:57 -0600)]
rebuild configure
William Pitcock [Mon, 16 Feb 2015 21:53:55 +0000 (15:53 -0600)]
configure: move some OS X toolchain checks around (closes #40)
Max Teufel [Mon, 16 Feb 2015 19:24:12 +0000 (20:24 +0100)]
m_invite: add support for CAP invite-notify
Specification:
<https://github.com/ircv3/ircv3-specifications/blob/master/extensions/invite-notify-3.2.md>
William Pitcock [Mon, 16 Feb 2015 21:39:36 +0000 (15:39 -0600)]
m_sasl: move some struct members around for sasl-reauth
William Pitcock [Sun, 15 Feb 2015 23:40:20 +0000 (17:40 -0600)]
cap: fix compile
William Pitcock [Sun, 15 Feb 2015 23:10:39 +0000 (17:10 -0600)]
cap: allow clients to do sasl reauth if they requested sasl and sasl-reauth (ref ircv3/ircv3#103).
William Pitcock [Sun, 15 Feb 2015 23:01:35 +0000 (17:01 -0600)]
cap: add notion of required dependency caps
William Pitcock [Sat, 14 Feb 2015 21:23:00 +0000 (15:23 -0600)]
Merge pull request #83 from maxteufel/feature/saslserv_config_option
m_sasl: add configuration option for the nick of the SASL agent
Max Teufel [Sat, 14 Feb 2015 09:41:10 +0000 (10:41 +0100)]
m_sasl: add configuration option for the nick of the SASL agent
This allows multiple improvements to m_sasl. With this change, the SASL
authentication gets aborted immediately when services are offline.
Additionally, we send the SASL ENCAP messages directly to the specified
SASL agent.
Jilles Tjoelker [Fri, 13 Feb 2015 22:07:02 +0000 (23:07 +0100)]
Ignore duplicate USER and PASS.
If SASL starts using USER/PASS for unregistered clients, this change stops
users from using one USER/PASS for SASL while using another for connecting.
Mantas Mikulėnas [Fri, 13 Feb 2015 20:16:53 +0000 (22:16 +0200)]
m_sasl: send information about the client connection
William Pitcock [Mon, 9 Feb 2015 20:59:56 +0000 (14:59 -0600)]
Merge pull request #81 from attilamolnar/master+openssl
openssl: Disable session tickets and session caching
Attila Molnar [Mon, 9 Feb 2015 20:19:09 +0000 (21:19 +0100)]
openssl: Disable session caching
Attila Molnar [Mon, 9 Feb 2015 20:18:32 +0000 (21:18 +0100)]
openssl: Disable session tickets
William Pitcock [Mon, 9 Feb 2015 17:14:03 +0000 (11:14 -0600)]
fix target list generation edge case where WALLCHOPS was requested alongside normal users if the source user was not a channel op.
from ircd-hybrid r5457
Jilles Tjoelker [Fri, 30 Jan 2015 16:54:13 +0000 (17:54 +0100)]
Merge branch 'master+sjoin-deadcode' of https://github.com/attilamolnar/charybdis
Attila Molnar [Fri, 30 Jan 2015 13:42:08 +0000 (14:42 +0100)]
SJOIN: Remove some dead code
Jilles Tjoelker [Sun, 25 Jan 2015 21:11:16 +0000 (22:11 +0100)]
introduce_client(): Remove redundant check for sockhost starting with colon.
Other code (inet_ntop6() in libratbox/src/commio.c and
extensions/m_webirc.c) ensures the sockhost does not start with a colon.
Checking only here does not make sense.
Reported by: Attila
Jilles Tjoelker [Fri, 16 Jan 2015 22:23:56 +0000 (23:23 +0100)]
Don't append a domain to names without dot from reverse lookup.
Some code to append "domain" from /etc/resolv.conf to unqualified names (for
server connections) erroneously applied to names from reverse DNS lookups as
well.
The effect was that "domain" from /etc/resolv.conf was appended to
"localhost", even though the DNS server intended "localhost" to be a fully
qualified name.
Aaron Jones [Thu, 15 Jan 2015 00:00:00 +0000 (00:00 +0000)]
Allow clients to have a resolved hostname of localhost
I slightly changed the patch to match surrounding style.
(cherry picked from commit
0b06270fd6266c85d19e008efcd039605daf59d0 )
Jilles Tjoelker [Fri, 17 Oct 2014 22:54:34 +0000 (00:54 +0200)]
pretty_mask(): Stop temporarily modifying the passed mask entirely.
Jilles Tjoelker [Fri, 10 Oct 2014 21:05:41 +0000 (23:05 +0200)]
pretty_mask(): Use explicit lengths instead of temporarily writing '\0'.
This is slightly simpler and should fix Coverity warnings.
Jilles Tjoelker [Thu, 15 Jan 2015 22:36:26 +0000 (23:36 +0100)]
libratbox: Fix sizeof in two memsets.
This fixes a compiler warning. The necessary fields of the struct sigevent
were initialized so there was no problem.
Submitted by: Aaron (via IRC)
Reviewed by: Attila
Jilles Tjoelker [Fri, 10 Oct 2014 21:56:16 +0000 (23:56 +0200)]
linebuf: Fix possible memory corruption when receiving many CR/LF.
The last byte of balloc.c's block pointer could be changed from 10 or 13 to
0. On amd64, this is not possible. On i386, this is possible and usually
causes a crash soon.
William Pitcock [Wed, 5 Nov 2014 10:52:50 +0000 (04:52 -0600)]
Merge pull request #73 from Argure/master
Explicitly drop SSLv3 connections (SSL_OP_NO_SSLv3) - might break TLS-ca...
William Pitcock [Wed, 5 Nov 2014 05:26:40 +0000 (23:26 -0600)]
Merge pull request #75 from attilamolnar/master+nullcharfix
Fix sending null char after ERROR when the server is full
Attila Molnar [Tue, 4 Nov 2014 20:57:37 +0000 (21:57 +0100)]
Fix sending null char after ERROR when the server is full
Patrick Godschalk [Sun, 26 Oct 2014 12:15:30 +0000 (13:15 +0100)]
Explicitly drop SSLv3 connections (SSL_OP_NO_SSLv3) - might break TLS-capable clients that still depend on SSLv23 handshake
Jilles Tjoelker [Sun, 21 Sep 2014 16:28:24 +0000 (18:28 +0200)]
ban: Fix build breakage.
A normal 'make' did not rebuild m_ban.c even though dependencies had
changed.
Jilles Tjoelker [Sun, 21 Sep 2014 16:20:26 +0000 (18:20 +0200)]
tools: Remove Hybrid 6 conversion tools.
Hybrid 6 is old enough that the conversion tools can go away now.
They are for I and K lines; the ircd.conf converter was already removed.
This removes compiler/analyzer warnings about these tools.
Jilles Tjoelker [Sun, 21 Sep 2014 16:03:20 +0000 (18:03 +0200)]
bandb: Don't apply empty ban list when bandb starts sending bans.
When bandb sends the ban list, it first sends 'C', then all bans and
finally 'F'. Only when 'F' is sent is ircd supposed to apply the bans.
Because of a missing break, 'C' also did 'F', clearing the ircd active
permanent bans until bandb sent 'F'.
The effect is pretty limited because having bandb send the ban list via
/rehash bans is uncommon and most bans will be enforced when reset.
Jilles Tjoelker [Sun, 21 Sep 2014 15:44:34 +0000 (17:44 +0200)]
libratbox: Add comment that case fallthrough is deliberate.
Jilles Tjoelker [Sun, 21 Sep 2014 14:58:06 +0000 (16:58 +0200)]
Gitignore vim swap files.
Jilles Tjoelker [Sun, 21 Sep 2014 14:56:49 +0000 (16:56 +0200)]
server: Don't read beyond the bounds of ServerInfo.ip and ServerInfo.ip6.
Jilles Tjoelker [Sun, 21 Sep 2014 13:16:15 +0000 (15:16 +0200)]
server: Remove two dead stores.
Jilles Tjoelker [Sun, 21 Sep 2014 13:02:43 +0000 (15:02 +0200)]
Explicitly pass the current time to deactivate_conf().
Some places depend on the ban not being destroyed.
Jilles Tjoelker [Sun, 21 Sep 2014 12:41:51 +0000 (14:41 +0200)]
Fix crash when there are two blacklist hosts without intervening reason.
This is invalid configuration; the first host is supposed to be ignored.
William Pitcock [Tue, 9 Sep 2014 15:19:35 +0000 (10:19 -0500)]
Merge pull request #70 from grobe0ba/master
Remove incorrect comment regarding location of functions in src/modules.c
Byron Grobe [Tue, 9 Sep 2014 08:13:42 +0000 (08:13 +0000)]
Removed comment from src/modules.c that states certain function were moved into a file that no longer exists. (Circa ~2002)
Mantas Mikulėnas [Mon, 8 Sep 2014 19:37:40 +0000 (22:37 +0300)]
doc/sasl.txt: forgot to wrap lines and sort references
Mantas Mikulėnas [Mon, 8 Sep 2014 19:27:36 +0000 (22:27 +0300)]
doc/sasl.txt: drop dead links, add links to IRCv3 spec and relevant SASL RFCs
Jilles Tjoelker [Sun, 17 Aug 2014 22:26:38 +0000 (00:26 +0200)]
chmode: Check mlock when a local oper changes cmode +L/+P.
This check was erroneously removed when fixing /mode #channel f when +f is
mlocked. Mlock checks were restricted to the places requiring chanops
(other than viewing +eI lists); cmode +L/+P do not require chanops, but
still constitute a mode change that must be checked against mlock.
Keith Buck [Sun, 17 Aug 2014 09:06:01 +0000 (09:06 +0000)]
BAN: Don't schedule check_klines for 0 seconds in the future.
When receiving bans from a bursting server, if kline_delay is set to 0
(the default), rb_event_addonce will be called to schedule an event for
0 seconds in the future. While this works fine for the fallback
rb_event_run function, the epoll implementation ends up scheduling a
timerfd for the event in the past, which is then never executed.
While fixing this, I also made rb_event_add and rb_event_addonce reject
attempts to add events scheduled for 0 seconds in the future; they're
instead rewritten to run 1 second in the future.
Jilles Tjoelker [Fri, 15 Aug 2014 20:38:56 +0000 (22:38 +0200)]
Update 3.5 NEWS.
Jilles Tjoelker [Fri, 15 Aug 2014 15:10:24 +0000 (17:10 +0200)]
SJOIN: Fix crash when both mode parameter and UID list are missing.
Closes #63
Jilles Tjoelker [Fri, 8 Aug 2014 09:57:09 +0000 (11:57 +0200)]
conf: Make channel::channel_target_change option actually work.
Channel target change was forcibly enabled.
Jilles Tjoelker [Sat, 21 Jun 2014 19:48:37 +0000 (21:48 +0200)]
extensions/extb_channel: Allow the channel itself as target even if +s/+p.
Jilles Tjoelker [Thu, 12 Jun 2014 21:30:37 +0000 (23:30 +0200)]
extensions/chm_sslonly: Use some 4xx numeric for the join failure.
Rylee Fowler [Sun, 13 Jul 2014 20:31:04 +0000 (16:31 -0400)]
Merge pull request #64 from maxanton/fix_path_to_ssl_cert
example configs: change ssl_cert to etc/ssl.pem
Max Teufel [Sun, 13 Jul 2014 16:12:54 +0000 (18:12 +0200)]
example configs: change ssl_cert to etc/ssl.pem
The genssl script writes to etc/ssl.pem by default.
Jilles Tjoelker [Thu, 12 Jun 2014 21:42:51 +0000 (23:42 +0200)]
smoketest: Remove race conditions causing occasional test failures.
Jilles Tjoelker [Thu, 12 Jun 2014 21:36:06 +0000 (23:36 +0200)]
Chase change from example.conf to ircd.conf.example in various places.
Jilles Tjoelker [Thu, 5 Jun 2014 20:10:49 +0000 (22:10 +0200)]
configure: Rerun autoconf.
Jilles Tjoelker [Thu, 5 Jun 2014 20:10:10 +0000 (22:10 +0200)]
configure: Restore libratbox build.
This fixes building from scratch.
Jilles Tjoelker [Tue, 3 Jun 2014 20:40:32 +0000 (22:40 +0200)]
Merge branch 'master+sharedsqlite' of https://github.com/lstarnes1024/charybdis
Lee Starnes [Sun, 1 Jun 2014 19:50:01 +0000 (15:50 -0400)]
configure: use pkg-config for sqlite
Lee Starnes [Sun, 1 Jun 2014 19:44:36 +0000 (15:44 -0400)]
aclocal.m4: rerun aclocal
Lee Starnes [Sun, 1 Jun 2014 19:43:55 +0000 (15:43 -0400)]
m4/pkg.m4: add pkg-config-0.24 macros
Lee Starnes [Sun, 1 Jun 2014 19:40:19 +0000 (15:40 -0400)]
configure: move local autoconf macros to m4/charybdis.m4
Lee Starnes [Sun, 1 Jun 2014 02:56:12 +0000 (22:56 -0400)]
configure: fix linking with shared sqlite on *BSD
Lee Starnes [Sun, 1 Jun 2014 01:14:09 +0000 (21:14 -0400)]
configure: use --with-shared-sqlite instead of --enable-shared-sqlite
Lee Starnes [Thu, 29 May 2014 21:53:43 +0000 (17:53 -0400)]
bandb: make Makefile work with BSD make again