From 94aa15801ff978a92de2c7dbcacfdbe1c1d31297 Mon Sep 17 00:00:00 2001
From: Sadie Powell
Date: Thu, 19 Mar 2026 00:45:01 +0000
Subject: Improve config compatibility with previous releases.

---
 docs/conf/modules.example.conf | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'docs')

diff --git a/docs/conf/modules.example.conf b/docs/conf/modules.example.conf
index e59fb9e3b..35d64acdd 100644
--- a/docs/conf/modules.example.conf
+++ b/docs/conf/modules.example.conf
@@ -1368,10 +1368,10 @@
 #<module name="ircv3_ctctags">
 #
 # If you want to only allow client tags that are intended for processing
-# by the server you can set allowclientonlytags to "none". Alternately,
-# you can set it to "known" to filter to known tags. Doing this is not
-# recommended though as it may break clients.
-#<ctctags allowclientonlytags="all">
+# by the server you can set clientonlytags to "none". Alternately, you
+# can set it to "known" to filter to known tags. Changing this is not
+# recommended though as it is known to break some clients.
+#<ctctags clientonlytags="all">
 
 #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
 # IRCv3 echo-message module: Provides the echo-message IRCv3
-- 
cgit v1.3.1-10-gc9f91


From b609be9c63200384f2ad2a76008fc7267083fd58 Mon Sep 17 00:00:00 2001
From: Sadie Powell
Date: Thu, 19 Mar 2026 00:50:07 +0000
Subject: Fix the documentation of the ircv3 module.

---
 docs/conf/modules.example.conf | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

(limited to 'docs')

diff --git a/docs/conf/modules.example.conf b/docs/conf/modules.example.conf
index 35d64acdd..6626e75a6 100644
--- a/docs/conf/modules.example.conf
+++ b/docs/conf/modules.example.conf
@@ -1317,10 +1317,10 @@
 
 #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
 # IRCv3 module: Provides the IRCv3 account-notify, away-notify,
-# extended-join, and standard-replies extensions. These are optional
-# enhancements to the client-to-server protocol. An extension is only
-# active for a client when the client specifically requests it, so this
-# module needs the cap module to work.
+# extended-join, no-implicit-names, and standard-replies extensions.
+# These are optional enhancements to the client-to-server protocol.
+# An extension is only active for a client when the client specifically
+# requests it, so this module needs the cap module to work.
 #
 # Further information on these extensions can be found at the IRCv3
 # working group website:
@@ -1328,8 +1328,7 @@
 #
 #<module name="ircv3">
 # The following block can be used to control which extensions are
-# enabled. Note that extended-join can be incompatible with delayjoin
-# and host cycling.
+# enabled.
 #<ircv3 accountnotify="yes"
 #       awaynotify="yes"
 #       extendedjoin="yes"
-- 
cgit v1.3.1-10-gc9f91


From 7a5ab67f26424c445f9bdb2bffc105cdec9f190c Mon Sep 17 00:00:00 2001
From: Sadie Powell
Date: Thu, 19 Mar 2026 15:03:30 +0000
Subject: Allow overriding the oper restrictions on the fingerprint extban.

---
 docs/conf/modules.example.conf | 5 +++++
 src/modules/m_sslmodes.cpp     | 5 +++--
 2 files changed, 8 insertions(+), 2 deletions(-)

(limited to 'docs')

diff --git a/docs/conf/modules.example.conf b/docs/conf/modules.example.conf
index 6626e75a6..1dc2c9b61 100644
--- a/docs/conf/modules.example.conf
+++ b/docs/conf/modules.example.conf
@@ -2653,6 +2653,11 @@
 # Does not do anything useful without a working TLS module and the
 # sslinfo module (see below).
 #<module name="sslmodes">
+#
+# By default the fingerprint extban can only be used by users who can
+# see fingerprints of other users (i.e. <sslinfo:operonly>). You can
+# override this behaviour with extbanoperonly.
+#<sslmodes extbanoperonly="yes">
 
 #-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#-#
 # TLS rehash signal module: Allows the TLS modules to be rehashed by
diff --git a/src/modules/m_sslmodes.cpp b/src/modules/m_sslmodes.cpp
index 8cc259cc4..72d34be39 100644
--- a/src/modules/m_sslmodes.cpp
+++ b/src/modules/m_sslmodes.cpp
@@ -192,8 +192,9 @@ public:
 
 	void ReadConfig(ConfigStatus& status) override
 	{
-		const auto& tag = ServerInstance->Config->ConfValue("sslinfo");
-		extban.operonly = tag->getBool("operonly");
+		const auto fpvisible = ServerInstance->Config->ConfValue("sslmodes")->getBool("operonly");
+		const auto& tag = ServerInstance->Config->ConfValue("sslmodes");
+		extban.operonly = tag->getBool("extbanoperonly", fpvisible);
 	}
 
 	ModResult OnUserPreJoin(LocalUser* user, Channel* chan, const std::string& cname, std::string& privs, const std::string& keygiven, bool override) override
-- 
cgit v1.3.1-10-gc9f91