~steering/inspircd++.git/src/modules/extra/m_ssl_openssl.cpp, branch v3.0.0a6 Unnamed repository; edit this file 'description' to name the repository. https://www.cgit.space/~steering/inspircd++.git/atom/src/modules/extra/m_ssl_openssl.cpp?h=v3.0.0a6 2017-12-21T12:32:27Z Merge pull request #1370 from clinew/insp30+openssl-crl 2017-12-21T12:32:27Z Peter Powell 2017-12-21T12:32:27Z urn:sha1:a98ae6f6716597572a2797b00f4e3a4a5d7e52d7 Add OpenSSL CRLs. Remove usage of deprecated API members in m_ssl_openssl. 2017-12-16T12:26:33Z Peter Powell 2017-12-15T10:48:33Z urn:sha1:2afc1af4639ae2bbef397f4f6acc834950017d91 Closes #1440. Add OpenSSL CRLs. 2017-12-15T04:45:24Z Wade Cline 2017-09-16T22:11:53Z urn:sha1:978084d96ff6ad38f155c9befd61c7c43677d763 The 'crlfile' argument can point to a file that contains valid CRLs. The 'crlpath' argument can point to a directory which contains CRLs, albeit in OpenSSL's special hashed/symlink format. The 'crlmode' option 'chain' checks all certificates in the chain while the option 'leaf' checks only the leaf certificate in a chain. Bump the minimum versions of GnuTLS to 2.0.0 and OpenSSL to 1.0.0. 2017-11-30T14:40:57Z Peter Powell 2017-11-30T14:17:13Z urn:sha1:ce780492ba9e471deee337d10e55e6b737cabafa Old TLS libraries should not be used anymore due to security risks. Improve TLS security configuration in m_ssl_openssl. 2017-11-30T13:42:14Z Peter Powell 2017-11-30T12:23:33Z urn:sha1:9201b69a13b81ca5cfa97a49ecdd035e463883f7 - Always disable SSLv3. Unreal has already done this so clients will have to upgrade anyway. - Disable TLSv1.0 by default. Various security standards (e.g. PCI DSS) are already planning on sunsetting this so we should too. Unite SSL service providers and SSL profile classes 2017-11-13T16:38:30Z Attila Molnar 2017-01-10T19:21:57Z urn:sha1:451e687f681ccab5c02a8de1a7d59b324efbfe08 Fix some SSL module issues. 2017-11-01T17:35:55Z Peter Powell 2017-11-01T17:23:00Z urn:sha1:a2a071126726a40a877e10b024e2c2cccfd35512 - Use the same dhparams name in m_ssl_openssl as in other modules. - Fix building m_ssl_mbedtls. Add support to IOHook for retrieving the hostname sent via SNI. 2017-10-29T11:15:47Z Peter Powell 2017-10-29T11:15:47Z urn:sha1:b047c903da20862783b50af73594cce1592cbbfe Add PackageInfo directives for Debian. 2017-10-21T20:24:29Z Peter Powell 2017-08-11T16:24:30Z urn:sha1:b0654ef6abd8d976fcbadce24ea350f7c420fe08 Clean up OnCleanup. 2017-10-18T11:54:51Z Peter Powell 2017-10-18T11:41:37Z urn:sha1:ee7ac5aaede95eb82ecc948d0e52ad01ddeaa6c9 - Switch to using ExtensionItem::ExtensibleType for the type instead of TargetTypeFlags. - Pass the extensible to OnCleanup as an Extensible pointer instead of a void pointer. - Call OnCleanup for memberships as well as channels and users. - Rewrite event documentation to remove outdated references.