aboutsummaryrefslogtreecommitdiff
path: root/src/modules/extra/m_ssl_openssl.cpp
Commit message (Expand)AuthorAgeFilesLines
* Update copyright headers.Gravatar InspIRCd Robot2022-12-301-1/+1
* Add a sslprofile option for disabling TLS 1.3 in ssl_openssl.•••This mirrors the options (<sslprofile:tlsv{1,11,12}>) for other TLS versions. Gravatar Sadie Powell2022-12-101-0/+6
* Update copyright headers.Gravatar InspIRCd Robot2022-04-281-2/+2
* Allow building with license-incompatible modules if manually enabled.•••[skip alpine ci] [skip macos ci] [skip ubuntu ci] Gravatar Sadie Powell2022-04-241-2/+2
* Work around the deprecation of the old curve API in OpenSSL 3.0.0.Gravatar Sadie Powell2022-01-251-3/+9
* Work around the deprecation of manual DH params in OpenSSL 3.0.0.•••As of this version specifying custom DH parameters is deprecated and should not be used. Instead, a default (secure) DH parameters will be used. Gravatar Sadie Powell2022-01-211-0/+13
* Fix ssl_openssl on OpenSSL 1.0.Gravatar Sadie Powell2022-01-071-1/+1
* Make reading DNs more consistent across modules.•••- If the DN contains a new line character then replace it with a space instead of killing the entire DN in the ssl_gnutls and ssl_openssl modules. - Apply the same logic to ssl_mbedtls which previously did not handle spaces in DNs. Gravatar Sadie Powell2021-10-141-11/+12
* Make the deprecation of LibreSSL support more explicit.Gravatar Sadie Powell2021-10-051-1/+1
* Send SSL profile reloading errors to snomask `a`.Gravatar Sadie Powell2021-09-221-1/+1
* Add an API for checking if I/O hooks are ready or not.Gravatar Sadie Powell2021-09-221-18/+13
* Fix ssl_openssl on a broken fork of OpenSSL.Gravatar Sadie Powell2021-09-071-1/+3
* Fix using the wrong variable for the ciphersuites in ssl_openssl.Gravatar Sadie Powell2021-07-191-1/+1
* Allow reloading SSL profiles on rehash.Gravatar Sadie Powell2021-06-241-3/+3
* Add a log message to the SSL mods to remind users how to reload profiles.Gravatar Sadie Powell2021-06-241-0/+5
* Fix various spelling issues (#1883).•••Signed-off-by: Josh Soref <jsoref@users.noreply.github.com> Gravatar Josh Soref2021-06-211-11/+11
* Implement support for setting TLSv1.3 ciphersuites in ssl_openssl.Gravatar Sadie Powell2021-05-251-1/+25
* Update references to config fields which were renamed.Gravatar Sadie Powell2021-04-141-1/+1
* Add a subclass of IOHookProvider for SSL modules.Gravatar Sadie Powell2021-03-091-2/+2
* Update copyright headers.Gravatar InspIRCd Robot2021-03-051-1/+2
* Update copyright headers.Gravatar InspIRCd Robot2021-02-261-1/+1
* Fix the message sent when SSL profiles are rehashed.Gravatar Sadie Powell2021-02-181-1/+1
* Add default empty openssl compiler flags.•••This makes things easier for users who are using InspIRCd on OSes where OpenSSL is part of the base system. Gravatar Sadie Powell2021-01-181-1/+1
* Make it clear that <gnutls>, <mbedtls>, and <openssl> are deprecated.Gravatar Sadie Powell2020-09-161-1/+1
* Improve SSL module debug logging.Gravatar Sadie Powell2020-06-161-0/+3
* Add a warning about LibreSSL support being removed in master.Gravatar Sadie Powell2020-05-151-0/+7
* Update copyright headers.Gravatar InspIRCd Robot2020-04-241-3/+3
* Only read the SSL profiles if they're actually specified.Gravatar Sadie Powell2020-04-211-22/+24
* Tell the admin how to use a SSL profile if they define one.Gravatar Sadie Powell2020-04-211-0/+1
* Allow 'tls' to be used in /REHASH.Gravatar Matt Schatz2020-04-141-1/+1
* Update user-facing text and comments of SSL to TLS.Gravatar Matt Schatz2020-04-141-7/+7
* Fix an oversight in mkversions that caused it to not update extras.Gravatar Sadie Powell2020-04-101-1/+1
* Update the module descriptions using mkversion.Gravatar Sadie Powell2020-04-101-1/+1
* Set the minimum length to 1 for most config items with a default.Gravatar Sadie Powell2020-04-091-9/+9
* Update copyright headers.Gravatar InspIRCd Robot2020-01-111-4/+11
* SSL modules: send SNOTICE upon successful rehash.Gravatar Matt Schatz2019-11-151-0/+1
* Use case insensitive comparisons when checking for SSL rehashes.Gravatar Peter Powell2019-11-031-1/+1
* Add package names for ArchLinux.Gravatar Peter Powell2019-07-161-0/+1
* Reset diagnostic pragmas after including external headers (#1661).Gravatar linuxdaemon2019-06-241-0/+8
* Add a way to disable older SSL versions with ssl_openssl.Gravatar Peter Powell2019-06-101-1/+16
* Some more text fixes and improvements (#1618).Gravatar Robby2019-04-281-1/+1
* Make more config stuff case insensitive.Gravatar Peter Powell2018-07-241-3/+3
* Add ConfigTag::getUInt for reading unsigned config values.Gravatar Peter Powell2018-04-161-1/+1
* Remove the default value in ConfigTag::get{Duration,Float,Int}.Gravatar Peter Powell2018-04-161-2/+2
* Merge pull request #1370 from clinew/insp30+openssl-crl•••Add OpenSSL CRLs.Gravatar Peter Powell2017-12-211-0/+45
|\
| * Add OpenSSL CRLs.•••The 'crlfile' argument can point to a file that contains valid CRLs. The 'crlpath' argument can point to a directory which contains CRLs, albeit in OpenSSL's special hashed/symlink format. The 'crlmode' option 'chain' checks all certificates in the chain while the option 'leaf' checks only the leaf certificate in a chain. Gravatar Wade Cline2017-12-141-0/+45
* | Remove usage of deprecated API members in m_ssl_openssl.•••Closes #1440. Gravatar Peter Powell2017-12-161-5/+19
|/
* Bump the minimum versions of GnuTLS to 2.0.0 and OpenSSL to 1.0.0.•••Old TLS libraries should not be used anymore due to security risks. Gravatar Peter Powell2017-11-301-7/+2
* Improve TLS security configuration in m_ssl_openssl.•••- Always disable SSLv3. Unreal has already done this so clients will have to upgrade anyway. - Disable TLSv1.0 by default. Various security standards (e.g. PCI DSS) are already planning on sunsetting this so we should too. Gravatar Peter Powell2017-11-301-4/+3
* Unite SSL service providers and SSL profile classesGravatar Attila Molnar2017-11-131-19/+31