9pfs/solanum-vs-hackint-and-charybdis
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Comparing some git repos with each other
4086 commits 4 branches 0 tags 40 MiB
C 92.3%
Shell 5.3%
M4 1.5%
Makefile 0.4%
Lex 0.2%
Other 0.3%
Find a file
jailbird777 8e9a741832 OpenSSL 3.0 compatibility 
Edited by @aaronmdjones:

- Correct some data types and casts

- Minor style fixups (e.g. we put * on the variable name not the type)

- librb/src/openssl.c:

  - Defer call of BIO_free(3ssl) to the end of the conditional block
    to avoid having calls to it in multiple paths

  - Check the return value of SSL_CTX_set0_tmp_dh_pkey(3ssl) because if
    it fails then we must use EVP_PKEY_free(3ssl) to avoid a memory leak

    This could fail if, for example, the user supplied DSA parameters
    in the DH parameters file instead.

- ircd/newconf.c:

  - Check whether OSSL_DECODER_CTX_new_for_pkey(3ssl) was able to parse
    the given CHALLANGE public key as a valid RSA public key, and then
    check whether OSSL_DECODER_from_bio(3ssl) actually loads it
    successfully

- ircd/s_newconf.c:

  - Use EVP_PKEY_free(3ssl) instead of OPENSSL_free(3ssl) on EVP_PKEY
    pointers; this will avoid inadvertent memory leaks if the EVP_PKEY
    structure contains any dynamically-allocated child members

- modules/m_challenge.c:

  - Unconditionally use EVP(3ssl) to generate the SHA-1 digest of the
    random challenge; this API has been around for a very long time and
    is available in all supported versions of OpenSSL

  - Add lots of error checking to all steps of the process

Tested against 1.1.1 and 3.0; both with missing and provided DH parameters
(which works as you'd expect; the server will not negotiate a DHE cipher
without them), and CHALLENGE, including missing keys or keys of the wrong
type (e.g. when you supply an EdDSA key instead of an RSA key).

This does break compatibility with OpenSSL 1.1.0 and below, which are now
all end-of-life and unsupported anyway.

Closes #357
2022-08-25 00:36:47 +00:00
.github/workflows CI: Modernize 2022-08-24 19:38:32 -04:00
authd Normalize snprintf size to use sizeof where possible 2022-06-24 01:42:08 -04:00
bandb Remove Windows support 2021-07-30 14:17:47 -04:00
doc EBMASK capab, to burst BMASK metadata (#354) 2022-08-20 01:35:54 +01:00
extensions chm_regmsg: don't duplicate nick in 415 2022-07-11 23:35:25 -04:00
help Remove ambiguity in descriptions +u 2022-01-31 00:02:07 +00:00
include OpenSSL 3.0 compatibility 2022-08-25 00:36:47 +00:00
ircd OpenSSL 3.0 compatibility 2022-08-25 00:36:47 +00:00
librb OpenSSL 3.0 compatibility 2022-08-25 00:36:47 +00:00
m4 Innovation by sed 2020-10-15 15:52:41 +01:00
modules OpenSSL 3.0 compatibility 2022-08-25 00:36:47 +00:00
scripts Innovation by sed 2020-10-15 15:52:41 +01:00
ssld Remove Windows support 2021-07-30 14:17:47 -04:00
tests valid_temp_time: more simplification and test fixes 2022-06-20 16:35:03 +01:00
testsuite "KDX-Line active for" is now L_NETWIDE, so remove sno_globalkline 2021-04-10 15:12:40 +01:00
tools Remove Windows support 2021-07-30 14:17:47 -04:00
wsockd Remove Windows support 2021-07-30 14:17:47 -04:00
.gitignore Update .gitignore for 25d169b649 (#69) 2020-11-11 14:14:12 -08:00
.mailmap Mailmap and copyright update for Ariadne 2021-06-01 12:40:02 -04:00
autogen.sh *sigh* comment these out until travis is fixed. 2016-04-10 17:12:42 -05:00
configure.ac Fix assert = hard assignments 2022-08-24 18:15:43 -04:00
CREDITS CREDITS: add mcintosh 2021-10-18 19:33:18 -04:00
LICENSE Remove more $Id tags. 2016-03-06 02:58:32 -06:00
Makefile.am Remove *.la from install/lib 2020-11-10 09:37:55 +00:00
NEWS.md wallops: require new oper:wallops right (#110) 2021-01-28 14:09:31 +00:00
README.md Fix link to doc/readme.txt 2021-11-02 08:52:41 -07:00
shtool Remove Windows support 2021-07-30 14:17:47 -04:00

README.md

solanum Build Status

Solanum is an IRCv3 server designed to be highly scalable. It implements IRCv3.1 and some parts of IRCv3.2.

It is meant to be used with an IRCv3-capable services implementation such as Atheme or Anope.

necessary requirements

  • A supported platform
  • A working dynamic library system
  • A working lex and yacc - flex and bison should work

platforms

Solanum is developed on Linux with glibc, but is currently portable to most POSIX-compatible operating systems. However, this portability is likely to be removed unless someone is willing to maintain it. If you'd like to be that person, please let us know on IRC.

platform specific errata

These are known issues and workarounds for various platforms.

  • macOS: you must set the LIBTOOLIZE environment variable to point to glibtoolize before running autogen.sh:

    brew install libtool
export LIBTOOLIZE="/usr/local/bin/glibtoolize"
./autogen.sh

  • FreeBSD: if you are compiling with ipv6 you may experience problems with ipv4 due to the way the socket code is written. To fix this you must: sysctl net.inet6.ip6.v6only=0

  • Solaris: you may have to set your PATH to include /usr/gnu/bin and /usr/gnu/sbin before /usr/bin and /usr/sbin. Solaris's default tools don't seem to play nicely with the configure script. When running as a 32-bit binary, it should be started as:

    ulimit -n 4095 ; LD_PRELOAD_32=/usr/lib/extendedFILE.so.1 ./solanum

building

sudo apt install build-essential pkg-config libsqlite3-dev # or equivalent for your distribution
./autogen.sh
./configure --prefix=/path/to/installation
make
make check # run tests
make install

See ./configure --help for build options.

feature specific requirements

  • For SSL/TLS client and server connections, one of:

    • OpenSSL 1.0.0 or newer (--enable-openssl)
    • LibreSSL (--enable-openssl)
    • mbedTLS (--enable-mbedtls)
    • GnuTLS (--enable-gnutls)

  • For certificate-based oper CHALLENGE, OpenSSL 1.0.0 or newer. (Using CHALLENGE is not recommended for new deployments, so if you want to use a different TLS library, feel free.)

  • For ECDHE under OpenSSL, on Solaris you will need to compile your own OpenSSL on these systems, as they have removed support for ECC/ECDHE. Alternatively, consider using another library (see above).

tips

  • To report bugs in Solanum, visit us at #solanum on Libera Chat

  • Please read doc/readme.txt to get an overview of the current documentation.

  • Read the NEWS.md file for what's new in this release.

  • The files, /etc/services, /etc/protocols, and /etc/resolv.conf, SHOULD be readable by the user running the server in order for ircd to start with the correct settings. If these files are wrong, Solanum will try to use 127.0.0.1 for a resolver as a last-ditch effort.

git access

  • The Solanum git repository can be checked out using the following command: git clone https://github.com/solanum-ircd/solanum

  • Solanum's git repository can be browsed over the Internet at the following address: https://github.com/solanum-ircd/solanum