Search found 1611 matches

by Syzop
Fri Oct 06, 2017 2:56 pm
Forum: Installing and getting connected
Topic: UnrealIRCd 4.0.15 ./Config
Replies: 2
Views: 331

Re: UnrealIRCd 4.0.15 ./Config

Odd, never seen that before. First run this: make clean Then in ./Config try answering No to remote includes. See if it finishes, and run make and make install If that all worked then you can retry all of the above with Yes answered to remote includes. Maybe that is the issue. Or maybe it works afte...
by Syzop
Tue Oct 03, 2017 8:05 pm
Forum: Generic support
Topic: Too frequent releases
Replies: 4
Views: 447

Re: Too frequent releases

I just tried to explain the approach we take. Give users a choice if they want to upgrade or not. There are so many different type of users and use cases. As for changing the '2 months'.. I don't want to get back to the habit of delaying fixes for 4-6 months simply because some people find releases ...
by Syzop
Mon Oct 02, 2017 7:32 am
Forum: Generic support
Topic: Too frequent releases
Replies: 4
Views: 447

Re: Crash issue in UnrealIRCd: apply hot fix ASAP or upgrade to 4.0.15

Releasing new version so often makes it hard on networks with multi servers. By the time I finish upgrading all my servers, there is new version already. Maybe you will not agree with my opinion, but I find it hard to keep up, since I do everything myself on my network. Since I assume you understan...
by Syzop
Sun Oct 01, 2017 12:05 pm
Forum: News and Releases
Topic: Crash issue in UnrealIRCd: apply hot fix ASAP or upgrade to 4.0.15
Replies: 0
Views: 1749

Crash issue in UnrealIRCd: apply hot fix ASAP or upgrade to 4.0.15

All UnrealIRCd versions up to and including 4.0.14 can be crashed by a remote user. It is a crash only. Remote code execution is not possible. There are actually two bugs. One of them can be triggered before the user is fully connected (so this also affects hubs and password-protected servers). The ...
by Syzop
Sun Oct 01, 2017 12:37 am
Forum: News and Releases
Topic: Pre-announcement (security issue)
Replies: 0
Views: 247

Pre-announcement (security issue)

UnrealIRCd will release a security advisory this Sunday 2017-10-01 around 15:00 UTC. The issues are fixable without a restart (on *NIX).

Full details will be available on said date/time.

UPDATE: Published. See Crash issue in UnrealIRCd: apply hot fix ASAP or upgrade to 4.0.15.
by Syzop
Fri Sep 15, 2017 9:51 am
Forum: Generic support
Topic: Websocket & SSL certs
Replies: 9
Views: 491

Re: Websocket

As far as I know, the existing users will be disconnected What is that based on? Speculation? I mean, I know how I coded it. It will only refresh the SSL_CTX for new connections. And I and many users have been using this feature for years now, without any such issues. I used it as recently as a wee...
by Syzop
Fri Sep 15, 2017 9:19 am
Forum: Generic support
Topic: Websocket & SSL certs
Replies: 9
Views: 491

Re: Websocket

It's not possible to reload specific certificates. But there should be no need. Reloading a certificate should be harmless for both new and existing users. (Well, unless you replaced the certificate with some incorrect certificate of course.. then new users won't be able to connect, but that's only ...
by Syzop
Fri Sep 15, 2017 9:00 am
Forum: News and Releases
Topic: UnrealIRCd 4.0.14 released
Replies: 0
Views: 1364

UnrealIRCd 4.0.14 released

Hi everyone, UnrealIRCd 4.0.14 (stable) is now available for download. This release consists of several SSL/TLS related improvements. There's now a tutorial called Using Let's Encrypt with UnrealIRCd which should help people get a "proper" SSL certificate. You may also be interested in my blog post ...
by Syzop
Fri Sep 15, 2017 8:58 am
Forum: Generic support
Topic: Websocket & SSL certs
Replies: 9
Views: 491

Re: Websocket

If you set up a dedicated port for your websocket connections, so a listen { } block, then you can use listen::ssl-options to use a specific certificate. See the Listen block documentation (in particular the ssl-options section).
by Syzop
Sun Sep 10, 2017 3:42 pm
Forum: Linking servers
Topic: Link servers SSL fingerprint validation
Replies: 11
Views: 812

Re: Link servers SSL fingerprint validation

Actually come to think of it, this should go in the "Linking servers" section :)
by Syzop
Sun Sep 10, 2017 3:16 pm
Forum: Linking servers
Topic: Link servers SSL fingerprint validation
Replies: 11
Views: 812

Re: Link servers SSL fingerprint validation & lets encrypt

First of all, I can fully understand how frustrating it can be if something doesn't work after hours of trying. I know the feeling (from other software). The default certificate/key is specified via set::ssl::certificate / key. You can override these in listen::ssl-options and link::outgoing::ssl-op...
by Syzop
Sat Sep 09, 2017 3:04 pm
Forum: Linking servers
Topic: Link servers SSL fingerprint validation
Replies: 11
Views: 812

Re: Link servers SSL fingerprint validation & lets encrypt

Could you show the following for both servers: * set::ssl block (if any) * listen blocks * link block to the other server Without censoring of the link::outgoing::port, censoring IP is fine. Or email me at syzop@unrealircd.org if you don't want it in public (in that case maybe do show me the IP). Ju...
by Syzop
Fri Sep 08, 2017 6:38 pm
Forum: Linking servers
Topic: Link servers SSL fingerprint validation
Replies: 11
Views: 812

Re: Link servers SSL fingerprint validation & lets encrypt

HeXiLeD, you have to authenticate both sides: So if on server1 you have a link block to server2 with autoconnect then it should connect to server2 on <port> and the SSL certificate of server2 on <port> should match the link::password specified in server1 conf. Similarly, the link::outgoing::ssl-opti...
by Syzop
Fri Sep 08, 2017 5:35 pm
Forum: Generic support
Topic: Using Let's Encrypt with UnrealIRCd
Replies: 3
Views: 352

Re: Using Let's Encrypt with UnrealIRCd

Thanks for the feedback. Let's Encrypt offers a number of options, allowing everyone to choose what options is best for his/her case. In case you wonder, I made specific choices for the common (and preferable) situation where an IRC server is hosted on a VPS without other services like an http(s) se...
by Syzop
Fri Sep 08, 2017 2:06 pm
Forum: Linking servers
Topic: Link servers SSL fingerprint validation
Replies: 11
Views: 812

Re: Link servers SSL fingerprint validation & lets encrypt

You ask how UnrealIRCd detects the password type (real password, fingerprint, etc). I could answer that but the source is a more neutral answer: https://github.com/unrealircd/unrealircd/blob/unreal40/src/auth.c#L58 If you type something in the configuration file (link::password) that is not an SSL f...