aboutsummaryrefslogtreecommitdiff
path: root/src/modules/extra/m_ssl_openssl.cpp
Commit message (Expand)AuthorAgeFilesLines
* Improve SSL module debug logging.Gravatar Sadie Powell2020-06-161-0/+3
* Add a warning about LibreSSL support being removed in master.Gravatar Sadie Powell2020-05-151-0/+7
* Update copyright headers.Gravatar InspIRCd Robot2020-04-241-3/+3
* Only read the SSL profiles if they're actually specified.Gravatar Sadie Powell2020-04-211-22/+24
* Tell the admin how to use a SSL profile if they define one.Gravatar Sadie Powell2020-04-211-0/+1
* Allow 'tls' to be used in /REHASH.Gravatar Matt Schatz2020-04-141-1/+1
* Update user-facing text and comments of SSL to TLS.Gravatar Matt Schatz2020-04-141-7/+7
* Fix an oversight in mkversions that caused it to not update extras.Gravatar Sadie Powell2020-04-101-1/+1
* Update the module descriptions using mkversion.Gravatar Sadie Powell2020-04-101-1/+1
* Set the minimum length to 1 for most config items with a default.Gravatar Sadie Powell2020-04-091-9/+9
* Update copyright headers.Gravatar InspIRCd Robot2020-01-111-4/+11
* SSL modules: send SNOTICE upon successful rehash.Gravatar Matt Schatz2019-11-151-0/+1
* Use case insensitive comparisons when checking for SSL rehashes.Gravatar Peter Powell2019-11-031-1/+1
* Add package names for ArchLinux.Gravatar Peter Powell2019-07-161-0/+1
* Reset diagnostic pragmas after including external headers (#1661).Gravatar linuxdaemon2019-06-241-0/+8
* Add a way to disable older SSL versions with ssl_openssl.Gravatar Peter Powell2019-06-101-1/+16
* Some more text fixes and improvements (#1618).Gravatar Robby2019-04-281-1/+1
* Make more config stuff case insensitive.Gravatar Peter Powell2018-07-241-3/+3
* Add ConfigTag::getUInt for reading unsigned config values.Gravatar Peter Powell2018-04-161-1/+1
* Remove the default value in ConfigTag::get{Duration,Float,Int}.Gravatar Peter Powell2018-04-161-2/+2
* Merge pull request #1370 from clinew/insp30+openssl-crl•••Add OpenSSL CRLs.Gravatar Peter Powell2017-12-211-0/+45
|\
| * Add OpenSSL CRLs.•••The 'crlfile' argument can point to a file that contains valid CRLs. The 'crlpath' argument can point to a directory which contains CRLs, albeit in OpenSSL's special hashed/symlink format. The 'crlmode' option 'chain' checks all certificates in the chain while the option 'leaf' checks only the leaf certificate in a chain. Gravatar Wade Cline2017-12-141-0/+45
* | Remove usage of deprecated API members in m_ssl_openssl.•••Closes #1440. Gravatar Peter Powell2017-12-161-5/+19
|/
* Bump the minimum versions of GnuTLS to 2.0.0 and OpenSSL to 1.0.0.•••Old TLS libraries should not be used anymore due to security risks. Gravatar Peter Powell2017-11-301-7/+2
* Improve TLS security configuration in m_ssl_openssl.•••- Always disable SSLv3. Unreal has already done this so clients will have to upgrade anyway. - Disable TLSv1.0 by default. Various security standards (e.g. PCI DSS) are already planning on sunsetting this so we should too. Gravatar Peter Powell2017-11-301-4/+3
* Unite SSL service providers and SSL profile classesGravatar Attila Molnar2017-11-131-19/+31
* Fix some SSL module issues.•••- Use the same dhparams name in m_ssl_openssl as in other modules. - Fix building m_ssl_mbedtls. Gravatar Peter Powell2017-11-011-1/+1
* Add support to IOHook for retrieving the hostname sent via SNI.Gravatar Peter Powell2017-10-291-0/+10
* Add PackageInfo directives for Debian.Gravatar Peter Powell2017-10-211-0/+1
* Clean up OnCleanup.•••- Switch to using ExtensionItem::ExtensibleType for the type instead of TargetTypeFlags. - Pass the extensible to OnCleanup as an Extensible pointer instead of a void pointer. - Call OnCleanup for memberships as well as channels and users. - Rewrite event documentation to remove outdated references. Gravatar Peter Powell2017-10-181-2/+2
* Fix a broken distro constraint in the m_ssl_openssl PackageInfo.Gravatar Peter Powell2017-08-111-1/+1
* Fix LibreSSL not having a shim for the OpenSSL 1.1 BIO API.Gravatar Peter Powell2016-11-231-1/+1
* Fix OpenSSL build errors caused by BIO/BIO_METHOD now being opaque.Gravatar Peter Powell2016-10-251-5/+45
* Add CentOS PackageInfoGravatar Adam2016-09-161-0/+1
* Rewrite the build system directive parser.Gravatar Peter Powell2016-09-161-3/+6
* Merge insp20Gravatar Attila Molnar2016-08-171-1/+7
|\
| * m_ssl_openssl Verify DH params being non-NULL before setting it on the context•••Fixes issue reported by @m4rkw on IRC Gravatar Attila Molnar2016-07-221-4/+11
| * m_ssl_gnutls, m_ssl_openssl After a read schedule another read if data remain...Gravatar Attila Molnar2016-06-211-1/+8
* | m_ssl_* Add option to sslprofile controlling whether to request client certif...Gravatar Attila Molnar2016-08-081-1/+10
* | Add StreamSocket::GetModHook() for obtaining the IOHook belonging to a given ...•••Use it to simplify logic in all modules using or providing IOHooks Gravatar Attila Molnar2016-08-081-8/+4
* | Pass sendq to OnStreamSocketWriteGravatar Attila Molnar2016-08-081-2/+1
* | Deduplicate code for on connect SSL ciphersuite NOTICE by moving it into m_ss...Gravatar Attila Molnar2016-04-281-22/+0
* | Export the GetCiphersuite() method from the SSL modulesGravatar Attila Molnar2016-04-281-1/+3
* | m_ssl_openssl Disable compression and SSL v3 by defaultGravatar Attila Molnar2015-11-101-2/+2
* | m_ssl_openssl Add workaround for a memory leak in OpenSSLGravatar Attila Molnar2015-11-101-1/+9
* | m_ssl_openssl Implement custom BIO methods that call SocketEngine methodsGravatar Attila Molnar2015-07-071-3/+86
* | m_ssl_openssl Remove NULL check of the session in OpenSSLIOHook constructorGravatar Attila Molnar2015-07-071-2/+0
* | m_ssl_openssl Use SSL_MODE_RELEASE_BUFFERS if availableGravatar Attila Molnar2015-07-061-1/+6
* | m_ssl_openssl Enable ECDH when acting as a server on OpenSSL 1.0.0 and laterGravatar Attila Molnar2015-07-061-0/+5
* | m_ssl_openssl Unconditionally compile code for detecting renegotiation and di...Gravatar Attila Molnar2015-07-061-9/+1