9pfs/solanum-vs-hackint-and-charybdis
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
solanum-vs-hackint-and-char.../libratbox
History
Antoine Beaupré 9f21f1b353
properly call gnutls_x509_crt_list_import 
the [manpage][] says:

>  unsigned int * cert_max
>      Initially must hold the maximum number of certs. It will be updated
>      with the number of certs available.

ratbox doesn't actually initialize that variable, so gnutls naturally
fails. i would also recommend considering dynamically allocating the
cert list to deal with that error in other ways than failing to
configured SSL completely in GnuTLS. the apache gnutls module has a
similar problem and came up with a [patch][] to do exactly this which
you may want to consider.

but since our cert chain is only (!) 5 certs long, our itched is
scratch by this particular patch.

[manpage]: https://manpages.debian.org/jessie/gnutls-doc/gnutls_x509_crt_list_import.3.en.html
[patch]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511573#35
2017-02-28 17:36:56 -05:00
..
include TLS: Partially backport the SubjectPublicKeyInfo digesting functionality 2016-11-15 12:30:09 +00:00
src properly call gnutls_x509_crt_list_import 2017-02-28 17:36:56 -05:00
.indent.pro Pull in libratbox from ircd-ratbox-3.0.0beta1 and integrate into the build system. 2008-04-01 11:52:26 -05:00
acinclude.m4 Detect a potential infinite loop in ./configure in AC_DEFINE_DIR. 2012-03-02 01:51:30 +00:00
aclocal.m4 charybdis 3.5.2. 2016-05-14 17:00:59 -05:00
ChangeLog Update libratbox. 2008-12-22 12:49:01 +03:00
compile libratbox: prepare build system for mbed tls backend 2015-12-03 18:37:32 -06:00
config.guess libratbox: prepare build system for mbed tls backend 2015-12-03 18:37:32 -06:00
config.sub libratbox: prepare build system for mbed tls backend 2015-12-03 18:37:32 -06:00
configure Backport more TLS backend and ssld fixes & improvements from 3.6 2016-04-30 21:39:05 +00:00
configure.ac Backport more TLS backend and ssld fixes & improvements from 3.6 2016-04-30 21:39:05 +00:00
COPYING Pull in libratbox from ircd-ratbox-3.0.0beta1 and integrate into the build system. 2008-04-01 11:52:26 -05:00
CREDITS Pull in libratbox from ircd-ratbox-3.0.0beta1 and integrate into the build system. 2008-04-01 11:52:26 -05:00
depcomp Pull in libratbox from ircd-ratbox-3.0.0beta1 and integrate into the build system. 2008-04-01 11:52:26 -05:00
INSTALL Pull in libratbox from ircd-ratbox-3.0.0beta1 and integrate into the build system. 2008-04-01 11:52:26 -05:00
install-sh libratbox: prepare build system for mbed tls backend 2015-12-03 18:37:32 -06:00
libratbox.pc.in Add libratbox.pc.in for out-of-tree libratbox build (think: packaging). 2008-06-10 22:02:10 -05:00
ltmain.sh libratbox: prepare build system for mbed tls backend 2015-12-03 18:37:32 -06:00
Makefile.am Add libratbox.pc.in for out-of-tree libratbox build (think: packaging). 2008-06-10 22:02:10 -05:00
Makefile.in libratbox: initial cut at an mbedtls implementation, which will replace openssl and gnutls backends in charybdis 3.6 2015-12-03 22:32:33 -06:00
missing Pull in libratbox from ircd-ratbox-3.0.0beta1 and integrate into the build system. 2008-04-01 11:52:26 -05:00
README Copied libratbox and related stuff from shadowircd upstream. 2008-12-03 02:49:39 +03:00
TODO Pull in libratbox from ircd-ratbox-3.0.0beta1 and integrate into the build system. 2008-04-01 11:52:26 -05:00

README 

This is libircd from ircd-ratbox.  A few notes about this library:

1. Most of this code isn't anywhere near threadsafe at this point.  Don't
   hold your breath on this either.
2. The linebuf code is designed to deal with pretty much 512 bytes per line
   and that is it.  Anything beyond that length unless in raw mode, gets
   discard.  For some non-irc purposes, this can be a problem, but for
   ircd stuff its fine.
3. The helper code when transmitting data between helpers, the same 512 byte
   limit applies there as we recycle the linebuf code for this.