aboutsummaryrefslogtreecommitdiff
path: root/src/modules/m_spanningtree/hmac.cpp
Commit message (Collapse)AuthorAgeFilesLines
* Say "SSL certificate fingerprint" instead of "SSL fingerprint" everywhereGravatar Attila Molnar2014-07-191-3/+3
|
* Use TimingSafeCompare() to compare passwords and password hashes (non-hmac only)Gravatar Attila Molnar2014-06-281-4/+4
| | | | Issue #882
* m_spanningtree Send the cert fingerprint message to opers only after ↵Gravatar Attila Molnar2014-06-281-5/+9
| | | | successful auth
* Check fingerprint before checking password (server linking)Gravatar Matthew Martin2014-06-281-15/+15
| | | | | | | Checking the password before the fingerprint means that even without the correct cert it's possible to brute force the password or leak information about it. Checking the fingerprint means attackers must forge the cert before they can learn any information about the password.
* m_spanningtree Don't rely on "m_sha256.so" being loaded, use any ↵Gravatar Attila Molnar2014-04-081-2/+2
| | | | "hash/sha256" service provider
* m_spanningtree Remove the (now) undocumented disablehmac config optionGravatar Attila Molnar2014-04-081-1/+1
|
* Change modules to use the MODNAME constant when logging.Gravatar Peter Powell2013-08-041-1/+1
| | | | | | | | The majority of modules were logging with their module name as the log type. There was a few places which were logging to a non-name type but, with the exception of CONFIG, those messages are so uncommon that it doesn't make sense to use a seperate type for them.
* Create SSLIOHook interface that provides GetCertificate()Gravatar attilamolnar2013-06-071-10/+1
|
* Fix spacing in calls to LogManager::Log.Gravatar Peter Powell2013-05-191-1/+1
|
* m_spanningtree Remove unneeded #includesGravatar attilamolnar2013-04-121-6/+0
|
* Tidy up source files:Gravatar Peter Powell2013-04-121-2/+2
| | | | | | - Use #pragma once instead of include guards. - Move header files in src/modules to include/modules. - Fixed various spacing issues.
* Add LOG_ prefix to the log level enum values.Gravatar Peter Powell2013-04-121-1/+1
|
* Remove legacy code, mostly related to 1.2 compatibilityGravatar attilamolnar2013-04-011-31/+2
|
* Replace copyright headers with headers granting specific authors copyrightGravatar Robby-2012-04-191-8/+15
|
* Add HMAC implementation to HashProviderGravatar danieldg2010-02-211-23/+19
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12508 e03df62e-2008-0410-955e-edbf42e46eb7
* Add random number generation functions to InspIRCd class.Gravatar danieldg2010-02-091-30/+0
| | | | | | | Default implementation uses libc random(), which can be better than rand(). If gnutls is loaded, gcrypt will be used to provide random numbers. git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12404 e03df62e-2008-0410-955e-edbf42e46eb7
* SSL certificate requests prior to full registration must use ↵Gravatar danieldg2010-02-081-1/+1
| | | | | | SocketCertificateRequest git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12402 e03df62e-2008-0410-955e-edbf42e46eb7
* Improve SSL fingerprint on link messageGravatar danieldg2010-02-011-4/+3
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12350 e03df62e-2008-0410-955e-edbf42e46eb7
* Add CAPAB CHANMODES, CAPAB USERMODES to verify matching of modes by name, ↵Gravatar danieldg2010-01-151-9/+9
| | | | | | not just by letter git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12262 e03df62e-2008-0410-955e-edbf42e46eb7
* ...because every now and again, i have to do a massive commit.Gravatar brain2010-01-111-1/+1
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12248 e03df62e-2008-0410-955e-edbf42e46eb7
* Use ServiceProvider for inter-module dependenciesGravatar danieldg2009-11-161-12/+20
| | | | | | | | | | | This will stop dependency chains from preventing module reloads when it is not actually needed; however, it removes some failsafes that will need to be reimplemented in order to avoid unmapped vtables. This deprecates Request as an inter-module signaling mechanism, although SQL still uses it. git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12140 e03df62e-2008-0410-955e-edbf42e46eb7
* Remove Extensible parent from EventHandlerGravatar danieldg2009-11-061-1/+1
| | | | | | This also fixes SSL certificate support when m_sslinfo is not loaded git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@12048 e03df62e-2008-0410-955e-edbf42e46eb7
* Improve SSL fingerprint messages when linking serversGravatar danieldg2009-10-181-10/+19
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11899 e03df62e-2008-0410-955e-edbf42e46eb7
* Update m_cloaking to use free-form keys instead of weakening the hash IVGravatar danieldg2009-10-101-2/+2
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11820 e03df62e-2008-0410-955e-edbf42e46eb7
* Update Event and Request APIsGravatar danieldg2009-10-081-9/+5
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11808 e03df62e-2008-0410-955e-edbf42e46eb7
* Create StreamSocket for IO hooking implementationGravatar danieldg2009-09-211-2/+2
| | | | | | | | | | | | | | Fixes the SSL SendQ bug Removes duplicate code between User and BufferedSocket Simplify SSL module API Simplify EventHandler API (Readable/Writeable moved to SE) Add hook for culled objects to invoke callbacks prior to destructor Replace SocketCull with GlobalCull now that sockets can close themselves Shorten common case of user read/parse/write path: User::Write is now zero-copy up to syscall/SSL invocation User::Read has only two copy/scan passes from read() to ProcessCommand git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11752 e03df62e-2008-0410-955e-edbf42e46eb7
* Improve link error message on SSL fingerprint mismatchGravatar danieldg2009-09-141-0/+4
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11723 e03df62e-2008-0410-955e-edbf42e46eb7
* Fix compile warningGravatar danieldg2009-09-141-1/+1
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11719 e03df62e-2008-0410-955e-edbf42e46eb7
* Change Extensible to use strongly typed entriesGravatar danieldg2009-09-131-6/+11
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11696 e03df62e-2008-0410-955e-edbf42e46eb7
* Change cmd_*.so to use the Module object APIGravatar danieldg2009-09-031-2/+0
| | | | | | | | | | | | | | Create Module* objects for each command, and load them like modules. This unifies the external API for modules. Library directory is now deprecated: all modules are located in a single module directory. Header files for each command are no longer needed; remove. This also fixes two potential segfaults in m_spanningtree. git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11668 e03df62e-2008-0410-955e-edbf42e46eb7
* Clean up challenge generation to not include character 0x7F, and fix some ↵Gravatar danieldg2009-09-021-11/+8
| | | | | | other things in the file git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11591 e03df62e-2008-0410-955e-edbf42e46eb7
* Fix build of m_spanningtree and display of dependency regenerationGravatar danieldg2009-09-011-9/+9
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11557 e03df62e-2008-0410-955e-edbf42e46eb7
* Allow SSL fingerprint-based server authenticationGravatar danieldg2009-06-071-6/+23
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11404 e03df62e-2008-0410-955e-edbf42e46eb7
* Update all wiki links to point to the new wiki. This was done automatically ↵Gravatar psychon2009-03-151-1/+1
| | | | | | | | | with the following command, only .Makefile.inc got some indent fixups by hand. for file in $(find -type f -and -not -path '*/.svn/*' -and -not -name '*.so') ; do sed -e 's#http://www.inspircd.org/wiki#http://wiki.inspircd.org#' -e 's#http://wiki.inspircd.org/index.php/#http://wiki.inspircd.org/#' -i $file ; done git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11223 e03df62e-2008-0410-955e-edbf42e46eb7
* Fix ComparePass for servers not supporting HMAC-SHA256 when ↵Gravatar danieldg2009-03-111-2/+2
| | | | | | ChallengeResponse is on in configuration git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11205 e03df62e-2008-0410-955e-edbf42e46eb7
* Push password comparison logic into ComparePass, fixes authentication bug ↵Gravatar danieldg2009-03-101-9/+5
| | | | | | noticed by HiroP git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@11195 e03df62e-2008-0410-955e-edbf42e46eb7
* Update copyrights for 2009.Gravatar w00t2009-01-021-1/+1
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@10932 e03df62e-2008-0410-955e-edbf42e46eb7
* Be consistent. Use ServerInstance in all places instead of 'Instance' in ↵Gravatar w00t2008-09-211-4/+4
| | | | | | half. This has bugged me forever :p. I think I got all of extra/ too.. git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@10579 e03df62e-2008-0410-955e-edbf42e46eb7
* Match conversion stuff.Gravatar w00t2008-08-221-1/+0
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@10216 e03df62e-2008-0410-955e-edbf42e46eb7
* Revert automated conversion by Special, as it (unfortunately) neglects some ↵Gravatar w00t2008-08-221-0/+1
| | | | | | details. It provides a useful start point, though, so it'll be used as the basis for the final conversion. git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@10215 e03df62e-2008-0410-955e-edbf42e46eb7
* Fix a lot of calls to match() and uses of wildcard.h (which doesn't exist ↵Gravatar special2008-08-221-1/+0
| | | | | | anymore) after w00t broke them. Still broken pending a few more changes (it's all w00t's fault.) git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@10214 e03df62e-2008-0410-955e-edbf42e46eb7
* Fix total mess of makefile dependency macros (all depending on stuff they ↵Gravatar brain2008-07-191-1/+1
| | | | | | | | | dont NEED to depend on) and fix includes in all of m_spanningtree (everything including just about everything, doesnt need to) git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@10046 e03df62e-2008-0410-955e-edbf42e46eb7
* fixed some indentation and spacing in modulesGravatar pippijn2008-06-111-1/+1
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@9888 e03df62e-2008-0410-955e-edbf42e46eb7
* Fix the warnings that are worth fixing, ignore the rest of gcc's nannyingGravatar brain2008-03-171-1/+2
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@9117 e03df62e-2008-0410-955e-edbf42e46eb7
* Convert remaining InspIRCd::Log() calls to new logging systemGravatar aquanight2008-02-221-1/+1
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@9001 e03df62e-2008-0410-955e-edbf42e46eb7
* Last of the -Wshadow fixes.Gravatar w00t2008-02-111-9/+9
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@8894 e03df62e-2008-0410-955e-edbf42e46eb7
* Move a piece of HMAC to hmac.cppGravatar w00t2008-02-041-0/+17
| | | | git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@8815 e03df62e-2008-0410-955e-edbf42e46eb7
* Split more of treesocket1Gravatar w00t2008-02-041-0/+130
git-svn-id: http://svn.inspircd.org/repository/trunk/inspircd@8812 e03df62e-2008-0410-955e-edbf42e46eb7