aboutsummaryrefslogtreecommitdiff
path: root/src/modules/extra/m_ssl_openssl.cpp
Commit message (Expand)AuthorAgeFilesLines
* Modernize the certificate fetching code in ssl_openssl.•••It is 2025 and we are using C++17 there is no need to declare variables like we are using C89. Gravatar Sadie Powell2025-11-031-7/+5
* Improve the way client certificates are validated in ssl_openssl.Gravatar Sadie Powell2025-11-021-10/+23
* Allow not setting the CA file in ssl_openssl.•••This matches the behaviour of ssl_gnutls. Gravatar Sadie Powell2025-11-021-4/+7
* Remove a long-obsolete workaround from ssl_openssl.Gravatar Sadie Powell2025-11-021-9/+0
* Revert "Remove some unnecessary casts in ssl_openssl".•••This reverts commit e242ce62af1a43c15844f7e6394952f6693629f8. Gravatar Sadie Powell2025-10-291-2/+3
* Remove some unnecessary casts in ssl_openssl.•••These fields were changed from int to size_t in OpenSSL 1.1.1. Gravatar Sadie Powell2025-10-281-3/+2
* Set the security level on the client context as well as the server one.Gravatar Sadie Powell2025-10-231-2/+5
* Set the groups on the client context as well as the server one.Gravatar Sadie Powell2025-10-231-6/+8
* Add better support for multiple TLS groups.•••- Rename <sslprofile:ecdhgroups> to <sslprofile:groups>. As of TLS 1.3 there are non-ECDH groups that can be used here - Switch the default to X25519MLKEM768:X25519:prime256v1 from just prime256v1. - Add <openssl:strictgroups> to allow only enabling supported groups similar to <gnutls:strictpriority>. - Get rid of an obsolete check for ECDH support. Gravatar Sadie Powell2025-10-231-9/+29
* Add support for using multiple ECDH groups to ssl_openssl.Gravatar Sadie Powell2025-09-201-11/+17
* Migrate the Windows build to Conan 2.•••[skip alpine ci] [skip irctest ci] [skip macos ci] [skip ubuntu ci] Gravatar Sadie Powell2025-04-171-2/+0
* Add <sslprofile:securitylevel>.•••This allows enforcing a minimum security level on the provided cert and key. We can use this in the future to squish insecure config. Gravatar Sadie Powell2025-04-031-0/+9
* Rename ToHuman to ToLongString.•••This name is used by functions in too many places already. Gravatar Sadie Powell2025-03-181-2/+2
* Add an flag to ToHuman to shorten the output.Gravatar Sadie Powell2025-03-031-2/+2
* Add Duration::ToHuman and update messages to use it.Gravatar Sadie Powell2025-03-031-2/+2
* Update copyright headers.Gravatar InspIRCd Robot2025-02-281-1/+1
* Convert debug logging from string concatenation to format strings.•••When running in normal mode this will prevent a bunch of expensive string concatenation. Gravatar Sadie Powell2025-01-231-2/+2
* Update copyright headers.Gravatar InspIRCd Robot2024-07-141-1/+0
* Modernise PackageInfo directives.•••- Add Alpine packages. - Add missing directives to log_json. - Drop obsolete version constraints. - Use system-like for debian and rhel. Gravatar Sadie Powell2024-07-131-4/+3
* Add MD5 as a fallback hash in the SSL modules for compat with v3.Gravatar Sadie Powell2024-06-191-1/+1
* Update copyright headers.Gravatar InspIRCd Robot2024-06-071-2/+2
* Allow using multiple SSL fingerprint algorithms.•••Closes #1804. Gravatar Sadie Powell2024-02-191-12/+20
* Try to help users with outdated SSL module configs.Gravatar Sadie Powell2023-09-081-0/+8
* Move TokenList back to its own header and move INSP_FORMAT to compat.•••This allows making stringutils an optional header given that most of it is not used by most of the codebase. Gravatar Sadie Powell2023-09-031-0/+1
* Assume an empty <sslprofile:provider> means the current module.Gravatar Sadie Powell2023-08-151-2/+2
* Update usages of stdalgo::string::equalsci to use insp::equalsci.Gravatar Sadie Powell2023-08-111-3/+4
* Merge branch 'insp3' into master.Gravatar Sadie Powell2023-06-171-1/+1
|\
| * Update copyright headers.Gravatar InspIRCd Robot2023-06-161-1/+1
* | Merge branch 'insp3' into master.Gravatar Sadie Powell2023-06-051-1/+1
|\|
| * Fix ssl_openssl on OpenSSL versions older than 1.1.1.•••Fixes a regression introduced in commit eba5cb9dc9. Gravatar Sadie Powell2023-05-281-0/+4
* | Merge branch 'insp3' into master.Gravatar Sadie Powell2023-05-161-2/+2
|\|
| * Fix cert expiration for dates after year 2049Gravatar Wade Cline2023-05-101-2/+2
* | Rename duration to timeutils and relocate InspIRCd::TimeString.Gravatar Sadie Powell2023-05-101-3/+3
* | Show more details about unactivated/expired client certificates.Gravatar Sadie Powell2023-05-101-7/+11
* | Merge branch 'insp3' into master.Gravatar Sadie Powell2023-04-281-1/+1
|\|
| * Update copyright headers.Gravatar InspIRCd Robot2023-04-281-1/+1
* | Merge branch 'insp3' into master.Gravatar Sadie Powell2023-04-271-4/+28
|\|
| * Add client cert activation/expiration times to the ssl_cert class.Gravatar Sadie Powell2023-03-011-4/+28
* | Fix using std::max instead of std::min when clamping NetBufferSize.Gravatar Sadie Powell2023-01-251-1/+1
* | Merge branch 'insp3' into master.Gravatar Sadie Powell2023-01-251-0/+1
|\|
| * Fix PackageInfo directives in extra modules.Gravatar Sadie Powell2023-01-191-0/+1
* | Replace getInt/getUInt/getFloat with type safe templated functions.Gravatar Sadie Powell2023-01-251-3/+3
* | Fix using (unsigned) long instead of (s)size_t.Gravatar Sadie Powell2023-01-241-3/+2
* | Convert log calls to use fmtlib format stringsGravatar Sadie Powell2023-01-241-5/+5
* | Log the versions of third-party libraries used by modules.Gravatar Sadie Powell2023-01-191-2/+6
* | Qualify auto correctly in all cases.Gravatar Sadie Powell2023-01-101-1/+1
* | Avoid copying shared_ptr<IOHookProvider> when not necessary.Gravatar Sadie Powell2023-01-101-1/+1
* | Avoid copying shared_ptr<ConfigTag> when not necessary.Gravatar Sadie Powell2023-01-101-4/+4
* | Merge branch 'insp3' into master.Gravatar Sadie Powell2023-01-011-1/+1
|\|
| * Update copyright headers.Gravatar InspIRCd Robot2022-12-301-1/+1