summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Document SASL EXTERNAL configuration in more detailC. McEnroe2019-11-061-0/+32
|
* Document pounce service configurationC. McEnroe2019-11-061-2/+61
|
* Mention Darwin and GNU/Linux in READMEC. McEnroe2019-11-061-4/+6
|
* Assume LibreSSL from brew on DarwinC. McEnroe2019-11-061-0/+1
|
* Remove -DNO_EXPLICIT_BZERO from Darwin.mkC. McEnroe2019-11-061-1/+0
|
* Don't install rc scripts or dirs on LinuxC. McEnroe2019-11-062-4/+10
|
* Add Linux.mkC. McEnroe2019-11-061-0/+5
|
* Use #defines for constant stringsC. McEnroe2019-11-063-11/+11
| | | | | GCC hates declaring static consts in headers and not using them, for some stupid reason.
* Declare more missing functions and deal with lack of SO_NOSIGPIPEC. McEnroe2019-11-064-4/+14
|
* Define one CERTBOT_PATH rather than two format stringsC. McEnroe2019-11-062-8/+10
|
* Change license to GPLv3C. McEnroe2019-11-0611-111/+124
| | | | | | | | | | | | | | > Notwithstanding any other provision of this License, if you modify the > Program, your modified version must prominently offer all users > interacting with it remotely through a computer network (if your version > supports such interaction) an opportunity to receive the Corresponding > Source of your version by providing access to the Corresponding Source > from a network server at no charge, through some standard or customary > means of facilitating copying of software. This potentially means that every freenode user, for example, is interacting with this software, and offering the corresponding source to each of them is an unreasonable burden.
* Add flag to generate a client certificateC. McEnroe2019-11-062-2/+31
| | | | | This is essentially the command freenode tells you to run: <https://freenode.net/kb/answer/certfp>.
* Give SYNOPSIS Ars more informative namesC. McEnroe2019-11-061-9/+9
|
* Expand SASL EXTERNAL documentationC. McEnroe2019-11-061-12/+16
|
* Use explicit_bzero from LibreSSLC. McEnroe2019-11-0612-22/+55
|
* Clean up bounce.cC. McEnroe2019-11-051-88/+87
|
* Use "priv" instead of "key" in optionsC. McEnroe2019-11-052-5/+5
| | | | Let all words be four letter words.
* Use arc4random_bufC. McEnroe2019-11-051-3/+1
|
* Add missing includeC. McEnroe2019-11-051-0/+1
|
* Use one call to set client cert and keyC. McEnroe2019-11-051-13/+2
|
* Implement SASL EXTERNALC. McEnroe2019-11-054-27/+40
|
* Add options for TLS client certificateC. McEnroe2019-11-044-9/+58
|
* Zero PASS parameterC. McEnroe2019-11-042-4/+6
|
* Don't set directory modes on installC. McEnroe2019-11-041-1/+1
|
* Hash client passwords with cryptC. McEnroe2019-11-046-14/+41
|
* Move base64 to bounce.hC. McEnroe2019-11-042-32/+35
|
* Rename bind-unix to bind-pathC. McEnroe2019-11-032-2/+2
|
* Append bindHost to bindPath if it is a directoryC. McEnroe2019-11-032-5/+22
|
* Set up /var/run/calico and /usr/local/etc/pounceC. McEnroe2019-11-033-3/+12
|
* Set procname in calico rc scriptC. McEnroe2019-11-021-2/+2
|
* Send an unrecognized_name alert when failing to dispatchC. McEnroe2019-11-021-3/+19
|
* Fix name of SNIC. McEnroe2019-11-022-2/+2
|
* Unlink UNIX socket at exitC. McEnroe2019-11-021-6/+35
|
* Note calico in pounce CAVEATSC. McEnroe2019-11-021-1/+8
|
* Add calico rc scriptC. McEnroe2019-11-025-10/+38
|
* Apply capsicum to calicoC. McEnroe2019-11-021-2/+29
|
* Fix trying to cap_rights_limit a NULL saveFileCurtis McEnroe2019-11-021-2/+4
|
* Implement UNIX-domain bindingC. McEnroe2019-11-023-2/+66
|
* Don't try to sendfd if connect failedC. McEnroe2019-11-021-2/+4
|
* Document pounce -U flagC. McEnroe2019-11-022-3/+31
| | | | Not yet implemented.
* Add SNI socket dispatcherC. McEnroe2019-11-025-8/+382
| | | | pounce can't accept connections from it yet though!
* Limit saveFile to CAP_WRITECurtis McEnroe2019-11-011-1/+4
|
* Implement capsicum workaround for certbotCurtis McEnroe2019-11-011-23/+66
|
* Reload certificates using openatCurtis McEnroe2019-11-012-42/+69
| | | | | This is more versatile since files are more likely to be replaced than overwritten.
* Re-read cert and key from the same FILEsCurtis McEnroe2019-11-013-9/+43
|
* Use capsicumCurtis McEnroe2019-11-012-0/+25
|
* Use explicit_bzero to clear passwordsCurtis McEnroe2019-10-317-15/+20
| | | | | GNU doesn't implement memset_s, but both FreeBSD and GNU implement explicit_bzero. Darwin doesn't, so #define it in terms of memset_s.
* Send clients their own QUIT on shutdownCurtis McEnroe2019-10-311-1/+4
|
* Shrink client buffer sizeCurtis McEnroe2019-10-311-1/+2
| | | | | | | Clients are generally not going to send huge amounts at a time, and IRC messages are limited to 512 bytes. If in the future we supported message tags from clients, which have a size limit of 8191 bytes, this would unfortunately have to be set much higher.
* Iterator over pollfds in reverseCurtis McEnroe2019-10-311-2/+1
| | | | | | | | | | | This has two advantages: 1. When removing a client, we don't need to break the loop, since the swap-remove will replace the current pollfd with one we've already handled and we can safely move on to the next (previous) one. 2. If a new client connects for the same consumer (for example if the previous one is going to time out), it will start consuming messages for that consumer, rather than them being sent to the old client.