aboutsummaryrefslogtreecommitdiff
path: root/src/modules/extra/m_ssl_openssl.cpp
Commit message (Expand)AuthorAgeFilesLines
* m_ssl_openssl Verify DH params being non-NULL before setting it on the context•••Fixes issue reported by @m4rkw on IRC Gravatar Attila Molnar2016-07-221-4/+11
* m_ssl_gnutls, m_ssl_openssl After a read schedule another read if data remain...Gravatar Attila Molnar2016-06-211-1/+8
* Remove some dead code found by CoverityGravatar Attila Molnar2014-10-261-3/+1
* m_ssl_openssl Add compile time option that allows disabling renegotiationsGravatar Attila Molnar2014-10-201-0/+61
* m_ssl_openssl Add compile time option to enable ECDHGravatar Attila Molnar2014-10-201-0/+36
* Initialize all fields of issl_session on module load in SSL modulesGravatar Attila Molnar2014-10-161-0/+2
* Add interface to SSL modules that allows other modules to obtain the raw SSL ...Gravatar Attila Molnar2014-10-161-0/+6
* m_ssl_openssl Fix debug messageGravatar Attila Molnar2014-10-151-1/+1
* m_ssl_openssl Reset data_to_write for new sessionsGravatar Attila Molnar2014-10-151-0/+2
* m_ssl_openssl Free the ssl_cert object as soon as the session is closed inste...Gravatar Attila Molnar2014-10-151-1/+1
* m_ssl_openssl Remove bogus errno assignment from CloseSession()Gravatar Attila Molnar2014-10-151-1/+0
* m_ssl_openssl Return an error from the IOHook read and write functions if the...•••The meaning of a 0 return value quoted from the manual: The TLS/SSL handshake was not successful but was shut down controlled and by the specifications of the TLS/SSL protocol. Gravatar Attila Molnar2014-10-141-1/+1
* m_ssl_openssl Add user-friendly config options for setting a few OpenSSL cont...Gravatar Attila Molnar2014-10-141-0/+14
* m_ssl_openssl Allow configuring raw OpenSSL context optionsGravatar Attila Molnar2014-10-101-2/+27
* m_ssl_openssl Disable session caching and session ticketsGravatar Attila Molnar2014-10-101-2/+5
* m_ssl_openssl Enable single (EC)DH use and disable SSL v2•••Options enabled: - SSL_OP_NO_SSLv2 - SSL_OP_SINGLE_DH_USE - SSL_OP_SINGLE_ECDH_USE (if it exists) Partial backport of #856 by @jvehent Gravatar Attila Molnar2014-10-101-0/+9
* m_ssl_openssl Clear the error queue before every SSL_* callGravatar Attila Molnar2014-10-081-0/+9
* Make sure the DN strings obtained from the SSL mods are always validGravatar Attila Molnar2014-07-241-0/+6
* Change Windows libraries to be dynamically linkedGravatar Adam2014-04-131-7/+2
* m_ssl_openssl Avoid Applink on Windows by calling PEM_read_bio_DHparams() ins...Gravatar Attila Molnar2014-04-131-0/+11
* m_ssl_openssl Fix memory leaks on /rehash ssl, unload and in VerifyCertificate()Gravatar Attila Molnar2014-01-261-2/+6
* Set a session id on our server ssl context in m_ssl_openssl. It is required f...Gravatar Adam2014-01-241-0/+3
* m_ssl_openssl Fix inverted check that prevented certificates from being recog...Gravatar attilamolnar2013-07-161-1/+1
* m_ssl_openssl Make it clear that a CA file is not mandatoryGravatar attilamolnar2013-03-151-1/+1
* Silence OpenSSL deprecation warnings on OS X.Gravatar Peter Powell2012-11-281-1/+9
* m_ssl_gnutls, m_ssl_openssl Set error message for the socket to "Connection c...Gravatar attilamolnar2012-11-091-0/+1
* m_ssl_openssl Remove unused variablesGravatar attilamolnar2012-11-091-10/+1
* Windows: In-depth cleanup (see details)•••-Fix x64 builds for Windows. Now all configurations compile. -Remove the non-working rebase stuff. -Remove the Windows fork hack and instead use FreeConsole() to emulate the behavior. This directly allows us to compile with ASLR, which is turned on now. -Remove the old IPC mechanism for the removed GUI. This is not needed anymore as the GUI wasn't ever supported on anything newer than 1.2 -Remove the WIN32/WINDOWS macros. _WIN32 is supported on all x86-based VC++ targets, so that's what we need. -Enable optimizations for release builds. -De-duplicate printf_c(), it was previously copy-pasted into colors.h for configure -Add the VC++ specific bad files in .gitignore -Disable PID writing on Windows. This is only making sense for *nix builds. -Replace the CPU usage retrieval with an algorithm analogous to the *nix behavior. Also supports separated now/total values. (Tested with a dummy busy loop - seems working) -Removed certain unused functions and variables -Remove stdint defines from the windows wrapper -Remove CRT debug alloc. This is a bad idea as it would define a macro to replace free which breaks builds. -Re-evaluated the warnings list, commented it. -Moved inspircd_config/_version to include/ to match *nix -Removed the creation of inspircd_se_config, as it isn't used at all. -Made non-git builds show as "r0" instead of "r" (thanks to @SaberUK for pointing this out) -Fixed up m_spanningtree's project paths. Now all configurations (debug/release x86/x64) have been tested and build properly. -Moved FindDNS out of the wrapper and matched its log behavior with *nix. (It's pointless having it in the wrapper after the recent slimming down) -Replaced random/srandom wrappers with a mechanism that tries to use Windows' Random API first is no SSL module is loaded. -Removed more old junk from support for compilers older than VC++ 2010 (we don't have project files for these, so compiling them would be hard anyways) -Removed the unused ClearConsole() -Removed unused includes from the wrapper. Also, do not include psapi.h here if we don't link psapi.lib. This should be done where appropriate. -Made inet_aton an inline function for increased performance -C4800, performance warning about bool forcing, resolved at all occurrences. -C4701, uninitialized variable 'cached', resolved at all occurrences. -dlerror() was migrated out of the wrapper for more thread safety (no global buffer being shared) and increased performance. -Removed the wrong CRT debug flags. This drains a lot of performance. -Removed the clock_gettime/gettimeofday wrappers -Replaced all TCHAR/ANSI mix-ups of functions with the correct respective function. -Added a block of C4355 for < VS2012 -Update project files for c870714 Gravatar ChrisTX2012-10-121-1/+1
* Replace hardcoded paths with configurable ones•••This patchset aims to ease the packaging of InspIRCd for a system-wide installation scenario. Changes in detail: configure: Add the options --log-path and --data-path m_ssl_gnutls, openssl: Change the hardcoded "conf/" to the existent CONFIG_PATH macro m_xline_db: Make the location of xline.db configurable. It will use --data-path as default value, but this can be changed using the configuration files. Gravatar ChrisTX2012-10-041-4/+4
* m_ssl_openssl Port ISUPPORT changes from m_ssl_gnutls to fix #261•••Add a config option that can be used to set the value of the SSL token in ISUPPORT (77b42efc86122d3720f85bddd85a2dc80d0baff9) Advertise only one ssl port by default in ISUPPORT (d30cdacab7100426c3773eafffd50aebf8155bba) Gravatar attilamolnar2012-07-271-5/+19
* m_ssl_openssl Use the system default cipher list if no cipher list is specifedGravatar attilamolnar2012-07-131-5/+8
* m_ssl_openssl: Allow the list of available ciphers to be customized.•••This patch was contributed almost 10 months ago via IRC, by spender. Gravatar Robby-2012-06-271-0/+7
* m_ssl_openssl: Show the SSL cipher used after connecting.•••Previously only a fingerprint was shown when one was available, else nothing was shown at all. Gravatar Robby-2012-06-271-2/+4
* Replace copyright headers with headers granting specific authors copyrightGravatar Robby-2012-04-191-8/+19
* Remove possibly dangerous skip of VerifyCertificateGravatar Daniel De Graaf2011-06-231-1/+1
* Fix initialization of SSL certificate field on connectGravatar Daniel De Graaf2011-06-231-0/+1
* Fix extras compilation under WindowsGravatar Adam2011-06-181-4/+9
* Possible fix for OpenSSL SendQ processing haltsGravatar Daniel De Graaf2010-04-161-1/+3
* Hide SSL= line of 005 if <gnutls:showports>/<openssl:showports> is false•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12484 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2010-02-171-13/+16
* Add <oper:autologin> to allow SSL fingerprint-based automatic oper login•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12467 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2010-02-151-2/+0
* Remove possible references to deleted User objects due to DNS lookups•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12445 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2010-02-121-4/+4
* Move configuration examples to docs, remove automatic overwrite on make install•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12383 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2010-02-061-2/+0
* Allow SSL fingerprint hash to be specified, and show fingerprint to client on...•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12357 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2010-02-021-24/+20
* Add Module::init() for correct exception handling during hook registration•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12278 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2010-01-171-1/+3
* Make a ./configure --system to support system-wide installation of inspircd•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12275 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2010-01-171-3/+2
* ...because every now and again, i have to do a massive commit.•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12248 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar brain2010-01-111-1/+1
* Use ServiceProvider for inter-module dependencies•••This will stop dependency chains from preventing module reloads when it is not actually needed; however, it removes some failsafes that will need to be reimplemented in order to avoid unmapped vtables. This deprecates Request as an inter-module signaling mechanism, although SQL still uses it. git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12140 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2009-11-161-3/+3
* Remove Extensible parent from EventHandler•••This also fixes SSL certificate support when m_sslinfo is not loaded git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12048 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2009-11-061-15/+25
* Move StreamSocket inheritance off of User•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12047 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2009-11-061-2/+1
* Fixes found by removing User inheritance from StreamSocket•••git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11975 e03df62e-2008-0410-955e-edbf42e46eb7 Gravatar danieldg2009-10-251-12/+3
generated by cgit v1.3.1-10-gc9f91 (git 2.54.0) at 2026-07-08 11:54:09 +0000