| Commit message (Expand) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Improve SSL module debug logging. | 2020-06-16 | 1 | -0/+3 | |
| * | Add a warning about LibreSSL support being removed in master. | 2020-05-15 | 1 | -0/+7 | |
| * | Update copyright headers. | 2020-04-24 | 1 | -3/+3 | |
| * | Only read the SSL profiles if they're actually specified. | 2020-04-21 | 1 | -22/+24 | |
| * | Tell the admin how to use a SSL profile if they define one. | 2020-04-21 | 1 | -0/+1 | |
| * | Allow 'tls' to be used in /REHASH. | 2020-04-14 | 1 | -1/+1 | |
| * | Update user-facing text and comments of SSL to TLS. | 2020-04-14 | 1 | -7/+7 | |
| * | Fix an oversight in mkversions that caused it to not update extras. | 2020-04-10 | 1 | -1/+1 | |
| * | Update the module descriptions using mkversion. | 2020-04-10 | 1 | -1/+1 | |
| * | Set the minimum length to 1 for most config items with a default. | 2020-04-09 | 1 | -9/+9 | |
| * | Update copyright headers. | 2020-01-11 | 1 | -4/+11 | |
| * | SSL modules: send SNOTICE upon successful rehash. | 2019-11-15 | 1 | -0/+1 | |
| * | Use case insensitive comparisons when checking for SSL rehashes. | 2019-11-03 | 1 | -1/+1 | |
| * | Add package names for ArchLinux. | 2019-07-16 | 1 | -0/+1 | |
| * | Reset diagnostic pragmas after including external headers (#1661). | 2019-06-24 | 1 | -0/+8 | |
| * | Add a way to disable older SSL versions with ssl_openssl. | 2019-06-10 | 1 | -1/+16 | |
| * | Some more text fixes and improvements (#1618). | 2019-04-28 | 1 | -1/+1 | |
| * | Make more config stuff case insensitive. | 2018-07-24 | 1 | -3/+3 | |
| * | Add ConfigTag::getUInt for reading unsigned config values. | 2018-04-16 | 1 | -1/+1 | |
| * | Remove the default value in ConfigTag::get{Duration,Float,Int}. | 2018-04-16 | 1 | -2/+2 | |
| * | Merge pull request #1370 from clinew/insp30+openssl-crl•••Add OpenSSL CRLs. | 2017-12-21 | 1 | -0/+45 | |
| |\ | |||||
| | * | Add OpenSSL CRLs.•••The 'crlfile' argument can point to a file that contains valid CRLs. The 'crlpath' argument can point to a directory which contains CRLs, albeit in OpenSSL's special hashed/symlink format. The 'crlmode' option 'chain' checks all certificates in the chain while the option 'leaf' checks only the leaf certificate in a chain. | 2017-12-14 | 1 | -0/+45 | |
| * | | Remove usage of deprecated API members in m_ssl_openssl.•••Closes #1440. | 2017-12-16 | 1 | -5/+19 | |
| |/ | |||||
| * | Bump the minimum versions of GnuTLS to 2.0.0 and OpenSSL to 1.0.0.•••Old TLS libraries should not be used anymore due to security risks. | 2017-11-30 | 1 | -7/+2 | |
| * | Improve TLS security configuration in m_ssl_openssl.•••- Always disable SSLv3. Unreal has already done this so clients will have to upgrade anyway. - Disable TLSv1.0 by default. Various security standards (e.g. PCI DSS) are already planning on sunsetting this so we should too. | 2017-11-30 | 1 | -4/+3 | |
| * | Unite SSL service providers and SSL profile classes | 2017-11-13 | 1 | -19/+31 | |
| * | Fix some SSL module issues.•••- Use the same dhparams name in m_ssl_openssl as in other modules. - Fix building m_ssl_mbedtls. | 2017-11-01 | 1 | -1/+1 | |
| * | Add support to IOHook for retrieving the hostname sent via SNI. | 2017-10-29 | 1 | -0/+10 | |
| * | Add PackageInfo directives for Debian. | 2017-10-21 | 1 | -0/+1 | |
| * | Clean up OnCleanup.•••- Switch to using ExtensionItem::ExtensibleType for the type instead of TargetTypeFlags. - Pass the extensible to OnCleanup as an Extensible pointer instead of a void pointer. - Call OnCleanup for memberships as well as channels and users. - Rewrite event documentation to remove outdated references. | 2017-10-18 | 1 | -2/+2 | |
| * | Fix a broken distro constraint in the m_ssl_openssl PackageInfo. | 2017-08-11 | 1 | -1/+1 | |
| * | Fix LibreSSL not having a shim for the OpenSSL 1.1 BIO API. | 2016-11-23 | 1 | -1/+1 | |
| * | Fix OpenSSL build errors caused by BIO/BIO_METHOD now being opaque. | 2016-10-25 | 1 | -5/+45 | |
| * | Add CentOS PackageInfo | 2016-09-16 | 1 | -0/+1 | |
| * | Rewrite the build system directive parser. | 2016-09-16 | 1 | -3/+6 | |
| * | Merge insp20 | 2016-08-17 | 1 | -1/+7 | |
| |\ | |||||
| | * | m_ssl_openssl Verify DH params being non-NULL before setting it on the context•••Fixes issue reported by @m4rkw on IRC | 2016-07-22 | 1 | -4/+11 | |
| | * | m_ssl_gnutls, m_ssl_openssl After a read schedule another read if data remain... | 2016-06-21 | 1 | -1/+8 | |
| * | | m_ssl_* Add option to sslprofile controlling whether to request client certif... | 2016-08-08 | 1 | -1/+10 | |
| * | | Add StreamSocket::GetModHook() for obtaining the IOHook belonging to a given ...•••Use it to simplify logic in all modules using or providing IOHooks | 2016-08-08 | 1 | -8/+4 | |
| * | | Pass sendq to OnStreamSocketWrite | 2016-08-08 | 1 | -2/+1 | |
| * | | Deduplicate code for on connect SSL ciphersuite NOTICE by moving it into m_ss... | 2016-04-28 | 1 | -22/+0 | |
| * | | Export the GetCiphersuite() method from the SSL modules | 2016-04-28 | 1 | -1/+3 | |
| * | | m_ssl_openssl Disable compression and SSL v3 by default | 2015-11-10 | 1 | -2/+2 | |
| * | | m_ssl_openssl Add workaround for a memory leak in OpenSSL | 2015-11-10 | 1 | -1/+9 | |
| * | | m_ssl_openssl Implement custom BIO methods that call SocketEngine methods | 2015-07-07 | 1 | -3/+86 | |
| * | | m_ssl_openssl Remove NULL check of the session in OpenSSLIOHook constructor | 2015-07-07 | 1 | -2/+0 | |
| * | | m_ssl_openssl Use SSL_MODE_RELEASE_BUFFERS if available | 2015-07-06 | 1 | -1/+6 | |
| * | | m_ssl_openssl Enable ECDH when acting as a server on OpenSSL 1.0.0 and later | 2015-07-06 | 1 | -0/+5 | |
| * | | m_ssl_openssl Unconditionally compile code for detecting renegotiation and di... | 2015-07-06 | 1 | -9/+1 | |
