~steering/inspircd++.git/src/modules/extra/m_ssl_openssl.cpp, branch v3.0.0 Unnamed repository; edit this file 'description' to name the repository. https://www.cgit.space/~steering/inspircd++.git/atom/src/modules/extra/m_ssl_openssl.cpp?h=v3.0.0 2019-04-28T21:26:50Z Some more text fixes and improvements (#1618). 2019-04-28T21:26:50Z Robby 2019-04-28T21:26:50Z urn:sha1:e59cb85871f75b7603c63c6cd274d57536cf6794 Make more config stuff case insensitive. 2018-07-24T20:55:10Z Peter Powell 2018-07-24T17:29:43Z urn:sha1:97a1d6429a735eb279496df010d04e3f42aa4e22 Add ConfigTag::getUInt for reading unsigned config values. 2018-04-16T14:29:55Z Peter Powell 2018-04-14T14:43:03Z urn:sha1:780dda83ba3857bc3c330d4b5d38bb251a9d879b Remove the default value in ConfigTag::get{Duration,Float,Int}. 2018-04-16T14:07:06Z Peter Powell 2018-04-14T15:53:03Z urn:sha1:7ef2f87e39bd22c7914caf7f2afbb1a3bf8fbd43 Merge pull request #1370 from clinew/insp30+openssl-crl 2017-12-21T12:32:27Z Peter Powell 2017-12-21T12:32:27Z urn:sha1:a98ae6f6716597572a2797b00f4e3a4a5d7e52d7 Add OpenSSL CRLs. Remove usage of deprecated API members in m_ssl_openssl. 2017-12-16T12:26:33Z Peter Powell 2017-12-15T10:48:33Z urn:sha1:2afc1af4639ae2bbef397f4f6acc834950017d91 Closes #1440. Add OpenSSL CRLs. 2017-12-15T04:45:24Z Wade Cline 2017-09-16T22:11:53Z urn:sha1:978084d96ff6ad38f155c9befd61c7c43677d763 The 'crlfile' argument can point to a file that contains valid CRLs. The 'crlpath' argument can point to a directory which contains CRLs, albeit in OpenSSL's special hashed/symlink format. The 'crlmode' option 'chain' checks all certificates in the chain while the option 'leaf' checks only the leaf certificate in a chain. Bump the minimum versions of GnuTLS to 2.0.0 and OpenSSL to 1.0.0. 2017-11-30T14:40:57Z Peter Powell 2017-11-30T14:17:13Z urn:sha1:ce780492ba9e471deee337d10e55e6b737cabafa Old TLS libraries should not be used anymore due to security risks. Improve TLS security configuration in m_ssl_openssl. 2017-11-30T13:42:14Z Peter Powell 2017-11-30T12:23:33Z urn:sha1:9201b69a13b81ca5cfa97a49ecdd035e463883f7 - Always disable SSLv3. Unreal has already done this so clients will have to upgrade anyway. - Disable TLSv1.0 by default. Various security standards (e.g. PCI DSS) are already planning on sunsetting this so we should too. Unite SSL service providers and SSL profile classes 2017-11-13T16:38:30Z Attila Molnar 2017-01-10T19:21:57Z urn:sha1:451e687f681ccab5c02a8de1a7d59b324efbfe08