9pfs/solanum-vs-hackint-and-charybdis
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Comparing some git repos with each other
2340 commits 4 branches 0 tags 40 MiB
C 92.3%
Shell 5.3%
M4 1.5%
Makefile 0.4%
Lex 0.2%
Other 0.3%
Find a file
Antoine Beaupré 9f21f1b353
properly call gnutls_x509_crt_list_import 
the [manpage][] says:

>  unsigned int * cert_max
>      Initially must hold the maximum number of certs. It will be updated
>      with the number of certs available.

ratbox doesn't actually initialize that variable, so gnutls naturally
fails. i would also recommend considering dynamically allocating the
cert list to deal with that error in other ways than failing to
configured SSL completely in GnuTLS. the apache gnutls module has a
similar problem and came up with a [patch][] to do exactly this which
you may want to consider.

but since our cert chain is only (!) 5 certs long, our itched is
scratch by this particular patch.

[manpage]: https://manpages.debian.org/jessie/gnutls-doc/gnutls_x509_crt_list_import.3.en.html
[patch]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511573#35
2017-02-28 17:36:56 -05:00
bandb Spring cleaning redux: 2015-04-20 00:55:20 -05:00
doc reference.conf: missed a line 2016-12-01 05:15:30 +00:00
extensions extensions/extb_channel: Allow matching secret channels. 2016-12-29 05:44:18 +00:00
help extensions/extb_channel: Allow matching secret channels. 2016-12-29 05:44:18 +00:00
include ircd: support restarting ssld processes 2016-12-04 21:24:56 +00:00
libratbox properly call gnutls_x509_crt_list_import 2017-02-28 17:36:56 -05:00
m4 m4/pkg.m4: add pkg-config-0.24 macros 2014-06-01 15:50:47 -04:00
modules mr_server: Handle certificate validation errors. 2016-12-09 10:01:22 +00:00
scripts release: Use git instead of hg for version number in tarballs. 2012-04-22 19:08:33 +02:00
src MODRESTART: Defer restart to the event loop 2016-12-28 20:15:39 +00:00
ssld TLS: Partially backport the SubjectPublicKeyInfo digesting functionality 2016-11-15 12:30:09 +00:00
testsuite Remove network_desc configuration option, never actually used anywhere 2015-03-26 14:46:54 -05:00
tools mkpasswd: avoid strdup(NULL) and the like if rb_crypt() fails 2016-12-20 03:54:08 +00:00
.gitignore tools: Remove Hybrid 6 conversion tools. 2014-09-21 18:20:39 +02:00
.indent.pro [svn] - the new plan: 2007-01-24 22:40:21 -08:00
.mailmap Add a Git .mailmap 2013-01-02 01:46:36 +02:00
.travis.yml Travis CI: Build against sqlite3 library, don't autogen 2016-05-03 23:29:27 +00:00
aclocal.m4 charybdis 3.5.0. 2016-01-05 19:49:18 -06:00
appveyor.yml Attempt to disable AppVeyor on this branch 2016-08-19 19:48:30 +00:00
configure Charybdis 3.5.4 2017-02-28 21:28:20 +00:00
configure.ac Charybdis 3.5.4 2017-02-28 21:28:20 +00:00
CREDITS CREDITS: fix my nickname and update my email address 2017-01-06 21:51:05 +00:00
GIT-Access Update Git repo references to new organization 2015-12-28 16:01:07 -08:00
INSTALL tools: Remove Hybrid 6 conversion tools. 2014-09-21 18:20:39 +02:00
install-sh [svn] - the new plan: 2007-01-24 22:40:21 -08:00
LICENSE [svn] - the new plan: 2007-01-24 22:40:21 -08:00
Makefile.in Fix inconsistency between --sysconfdir and --with-confdir, deprecate --with-confdir. 2012-03-02 01:11:42 +00:00
NEWS.md Charybdis 3.5.4 2017-02-28 21:28:20 +00:00
README.md README: Update location of support channel 2016-09-15 09:45:41 +00:00
TODO Back out chanroles. 2011-07-07 21:24:14 -04:00

README.md

charybdis

Charybdis is a reference implementation of the IRCv3.1 server component. It is meant to be used with an IRCv3-capable services implementation such as Atheme or Anope.

necessary requirements

  • A supported platform
  • A working dynamic load library.
  • A working lex. Solaris /usr/ccs/bin/lex appears to be broken, on this system flex should be used.

feature specific requirements

  • For SSL/TLS client and server connections, one of:

    • OpenSSL 1.0.0 or newer (--enable-openssl)
    • LibreSSL (--enable-openssl)
    • MbedTLS (--enable-mbedtls)
    • GnuTLS (--enable-gnutls)

  • For certificate-based oper CHALLENGE, OpenSSL 1.0.0 or newer. (Using CHALLENGE is not recommended for new deployments, so if you want to use a different TLS library, feel free.)

  • For ECDHE under OpenSSL, on Solaris and RHEL/Fedora (and its derivatives such as CentOS) you will need to compile your own OpenSSL on these systems, as they have removed support for ECC/ECDHE. Alternatively, consider using another library (see above).

tips

  • To report bugs in charybdis, visit us at irc.charybdis.io #charybdis

  • Please read doc/index.txt to get an overview of the current documentation.

  • The files, /etc/services, /etc/protocols, and /etc/resolv.conf, SHOULD be readable by the user running the server in order for ircd to start with the correct settings. If these files are wrong, charybdis will try to use 127.0.0.1 for a resolver as a last-ditch effort.

  • FREEBSD USERS: if you are compiling with ipv6 you may experience problems with ipv4 due to the way the socket code is written. To fix this you must: "sysctl net.inet6.ip6.v6only=0"

  • SOLARIS USERS: this code appears to tickle a bug in older gcc and egcs ONLY on 64-bit Solaris7. gcc-2.95 and SunPro C on 64bit should work fine, and any gcc or SunPro compiled on 32bit.

  • SUPPORTED PLATFORMS: this code should compile without any warnings on:

    • FreeBSD 10
    • Gentoo & Gentoo Hardened ~x86/~amd64/~fbsd
    • RHEL 6 / 7
    • Debian Jessie
    • OpenSuSE 11/12
    • OpenSolaris 2008.x?
    • Solaris 10 sparc.

Please let us know if you find otherwise.
It probably does not compile on AIX, IRIX or libc5 Linux.

  • Please read NEWS for information about what is in this release.

  • Other files recommended for reading: BUGS, INSTALL