aboutsummaryrefslogtreecommitdiff
path: root/src/modules/extra/m_ssl_openssl.cpp
Commit message (Expand)AuthorAgeFilesLines
* Add package names for ArchLinux.Gravatar Peter Powell2019-07-161-0/+1
* Reset diagnostic pragmas after including external headers (#1661).Gravatar linuxdaemon2019-06-241-0/+8
* Add a way to disable older SSL versions with ssl_openssl.Gravatar Peter Powell2019-06-101-1/+16
* Some more text fixes and improvements (#1618).Gravatar Robby2019-04-281-1/+1
* Make more config stuff case insensitive.Gravatar Peter Powell2018-07-241-3/+3
* Add ConfigTag::getUInt for reading unsigned config values.Gravatar Peter Powell2018-04-161-1/+1
* Remove the default value in ConfigTag::get{Duration,Float,Int}.Gravatar Peter Powell2018-04-161-2/+2
* Merge pull request #1370 from clinew/insp30+openssl-crl•••Add OpenSSL CRLs.Gravatar Peter Powell2017-12-211-0/+45
|\
| * Add OpenSSL CRLs.•••The 'crlfile' argument can point to a file that contains valid CRLs. The 'crlpath' argument can point to a directory which contains CRLs, albeit in OpenSSL's special hashed/symlink format. The 'crlmode' option 'chain' checks all certificates in the chain while the option 'leaf' checks only the leaf certificate in a chain. Gravatar Wade Cline2017-12-141-0/+45
* | Remove usage of deprecated API members in m_ssl_openssl.•••Closes #1440. Gravatar Peter Powell2017-12-161-5/+19
|/
* Bump the minimum versions of GnuTLS to 2.0.0 and OpenSSL to 1.0.0.•••Old TLS libraries should not be used anymore due to security risks. Gravatar Peter Powell2017-11-301-7/+2
* Improve TLS security configuration in m_ssl_openssl.•••- Always disable SSLv3. Unreal has already done this so clients will have to upgrade anyway. - Disable TLSv1.0 by default. Various security standards (e.g. PCI DSS) are already planning on sunsetting this so we should too. Gravatar Peter Powell2017-11-301-4/+3
* Unite SSL service providers and SSL profile classesGravatar Attila Molnar2017-11-131-19/+31
* Fix some SSL module issues.•••- Use the same dhparams name in m_ssl_openssl as in other modules. - Fix building m_ssl_mbedtls. Gravatar Peter Powell2017-11-011-1/+1
* Add support to IOHook for retrieving the hostname sent via SNI.Gravatar Peter Powell2017-10-291-0/+10
* Add PackageInfo directives for Debian.Gravatar Peter Powell2017-10-211-0/+1
* Clean up OnCleanup.•••- Switch to using ExtensionItem::ExtensibleType for the type instead of TargetTypeFlags. - Pass the extensible to OnCleanup as an Extensible pointer instead of a void pointer. - Call OnCleanup for memberships as well as channels and users. - Rewrite event documentation to remove outdated references. Gravatar Peter Powell2017-10-181-2/+2
* Fix a broken distro constraint in the m_ssl_openssl PackageInfo.Gravatar Peter Powell2017-08-111-1/+1
* Fix LibreSSL not having a shim for the OpenSSL 1.1 BIO API.Gravatar Peter Powell2016-11-231-1/+1
* Fix OpenSSL build errors caused by BIO/BIO_METHOD now being opaque.Gravatar Peter Powell2016-10-251-5/+45
* Add CentOS PackageInfoGravatar Adam2016-09-161-0/+1
* Rewrite the build system directive parser.Gravatar Peter Powell2016-09-161-3/+6
* Merge insp20Gravatar Attila Molnar2016-08-171-1/+7
|\
| * m_ssl_openssl Verify DH params being non-NULL before setting it on the context•••Fixes issue reported by @m4rkw on IRC Gravatar Attila Molnar2016-07-221-4/+11
| * m_ssl_gnutls, m_ssl_openssl After a read schedule another read if data remain...Gravatar Attila Molnar2016-06-211-1/+8
* | m_ssl_* Add option to sslprofile controlling whether to request client certif...Gravatar Attila Molnar2016-08-081-1/+10
* | Add StreamSocket::GetModHook() for obtaining the IOHook belonging to a given ...•••Use it to simplify logic in all modules using or providing IOHooks Gravatar Attila Molnar2016-08-081-8/+4
* | Pass sendq to OnStreamSocketWriteGravatar Attila Molnar2016-08-081-2/+1
* | Deduplicate code for on connect SSL ciphersuite NOTICE by moving it into m_ss...Gravatar Attila Molnar2016-04-281-22/+0
* | Export the GetCiphersuite() method from the SSL modulesGravatar Attila Molnar2016-04-281-1/+3
* | m_ssl_openssl Disable compression and SSL v3 by defaultGravatar Attila Molnar2015-11-101-2/+2
* | m_ssl_openssl Add workaround for a memory leak in OpenSSLGravatar Attila Molnar2015-11-101-1/+9
* | m_ssl_openssl Implement custom BIO methods that call SocketEngine methodsGravatar Attila Molnar2015-07-071-3/+86
* | m_ssl_openssl Remove NULL check of the session in OpenSSLIOHook constructorGravatar Attila Molnar2015-07-071-2/+0
* | m_ssl_openssl Use SSL_MODE_RELEASE_BUFFERS if availableGravatar Attila Molnar2015-07-061-1/+6
* | m_ssl_openssl Enable ECDH when acting as a server on OpenSSL 1.0.0 and laterGravatar Attila Molnar2015-07-061-0/+5
* | m_ssl_openssl Unconditionally compile code for detecting renegotiation and di...Gravatar Attila Molnar2015-07-061-9/+1
* | m_ssl_gnutls, m_ssl_openssl Log library version information on loadGravatar Attila Molnar2015-06-221-0/+2
* | Call OnStreamSocketWrite() once per write event•••Do sendq flattening in SSL modules, move code for it into class SSLIOHook from core Gravatar Attila Molnar2015-06-061-3/+8
* | Add max outgoing record size option to sslprofile configGravatar Attila Molnar2015-06-061-0/+6
* | Convert all code to use StreamSocket::SendQueue•••Let OnStreamSocketWrite see the entire sendq instead of one element at a time Gravatar Attila Molnar2015-06-061-2/+4
* | Merge insp20Gravatar Attila Molnar2015-05-101-0/+14
|\|
* | m_ssl_openssl Remove OpenSSLIOHook::outbound and is_outbound constructor para...Gravatar Attila Molnar2015-03-051-5/+3
* | m_ssl_openssl Specify TLS client/server role on session creation, switch to S...Gravatar Attila Molnar2015-03-051-11/+14
* | m_ssl_gnutls, m_ssl_openssl Deduplicate Handshake() calling codeGravatar Attila Molnar2015-03-051-25/+23
* | m_ssl_gnutls, m_ssl_openssl Simplify status handling in IOHook read/write han...•••Remove states ISSL_CLOSING and ISSL_CLOSED from m_ssl_gnutls Gravatar Attila Molnar2015-03-051-8/+3
* | m_ssl_gnutls, m_ssl_openssl Simplify Handshake() result handlingGravatar Attila Molnar2015-03-051-21/+13
* | m_ssl_gnutls, m_ssl_openssl Prepend TLS protocol version to ciphersuite stringGravatar Attila Molnar2015-01-271-0/+1
* | m_ssl_gnutls, m_ssl_openssl Extract code that builds a ciphersuite string int...Gravatar Attila Molnar2015-01-271-1/+8
* | Reduce std::string::substr() usage•••substr() returns a new string while erase() and assign() modify the existing one Gravatar Attila Molnar2015-01-101-1/+1