Juni 2011 - ngIRCd GIT Updates

Tag rel-18-rc2: Alexander Barton : ngIRCd release 18~rc2
by alex＠arthur.barton.de 29 Jun '11

29 Jun '11

Module: ngircd.git Branch: refs/tags/rel-18-rc2 Tag: f8dc4de80dd403315adb47560151f74287981ea9 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=tag;h=f8dc4de80dd… Tagger: Alexander Barton <alex(a)barton.de> Date: Wed Jun 29 10:23:07 2011 +0200 ngIRCd release 18~rc2

1 0

Alexander Barton : ngIRCd release 18~rc2
by alex＠arthur.barton.de 29 Jun '11

29 Jun '11

Module: ngircd.git Branch: master Commit: af60f04fef1bdad9ca1c8384f6479f4c33f1b923 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=af60f04f… Author: Alexander Barton <alex(a)barton.de> Date: Wed Jun 29 10:22:46 2011 +0200 ngIRCd release 18~rc2 --- ChangeLog | 9 +++++++++ NEWS | 6 ++++++ contrib/Debian/changelog | 6 ++++++ contrib/ngircd.spec | 2 +- 4 files changed, 22 insertions(+), 1 deletions(-) diff --git a/ChangeLog b/ChangeLog index 436b779..0b2f967 100644 --- a/ChangeLog +++ b/ChangeLog @@ -11,6 +11,15 @@ ngIRCd Release 18 + ngIRCd 18~rc2 (2011-06-29) + - Update documentation, fix some wording, and use a spellchecker :-) + - ngircd.conf.5: strip "SSL" prefix from variables in [SSL] section. + - ngircd.8: document debugging options. + - GnuTLS: use 1024 bits as minimum size of the DH prime. This enables + ngIRCd to accept incoming connections from other servers and clients + that "only" use at least 1024 bits again, like ngIRCd 17 did (and no + longer requires 2048 bits for incoming connections). + ngIRCd 18~rc1 (2011-06-27) - PAM warning message: make clear which "Password" config option is ignored. - New configuration option "MorePrivacy" to "censor" some user information. diff --git a/NEWS b/NEWS index a6bacf3..2f1e5be 100644 --- a/NEWS +++ b/NEWS @@ -10,6 +10,12 @@ ngIRCd Release 18 + ngIRCd 18~rc2 (2011-06-29) + - GnuTLS: use 1024 bits as minimum size of the DH prime. This enables + ngIRCd to accept incoming connections from other servers and clients + that "only" use at least 1024 bits again, like ngIRCd 17 did (and no + longer requires 2048 bits for incoming connections). + ngIRCd 18~rc1 (2011-06-27) - New configuration option "MorePrivacy" to "censor" some user information. When enabled, signon time and idle time is left out. Part and quit diff --git a/contrib/Debian/changelog b/contrib/Debian/changelog index 1b7997e..209fcbc 100644 --- a/contrib/Debian/changelog +++ b/contrib/Debian/changelog @@ -1,3 +1,9 @@ +ngircd (18~rc2-0ab1) unstable; urgency=low + + * New "upstream" release candidate 2 for ngIRCd Release 18. + + -- Alexander Barton <alex(a)barton.de> Wed, 29 Jun 2011 10:20:51 +0200 + ngircd (18~rc1-0ab1) unstable; urgency=low * New "upstream" release candidate 1 for ngIRCd Release 18. diff --git a/contrib/ngircd.spec b/contrib/ngircd.spec index 6a2165b..7b7047a 100644 --- a/contrib/ngircd.spec +++ b/contrib/ngircd.spec @@ -1,5 +1,5 @@ %define name ngircd -%define version 18~rc1 +%define version 18~rc2 %define release 1 %define prefix %{_prefix}

1 0

Alexander Barton : GnuTLS: use 1024 (DH_BITS_MIN) as minimum size of the DH prime
by alex＠arthur.barton.de 28 Jun '11

28 Jun '11

Module: ngircd.git Branch: master Commit: 2d35731399890316610e85d7a7aea41529b1fea9 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=2d357313… Author: Alexander Barton <alex(a)barton.de> Date: Tue Jun 28 13:48:33 2011 +0200 GnuTLS: use 1024 (DH_BITS_MIN) as minimum size of the DH prime For outgoing connections, we use 2048 (DH_BITS) since commit 49b2d0e. This patch enables ngIRCd to accept incoming connections from other servers and clients that use at least 1024 bits (and no longer requires 2048 for incoming connections, too). Patch proposed by Florian Westphal. --- src/ngircd/conn-ssl.c | 5 +++-- 1 files changed, 3 insertions(+), 2 deletions(-) diff --git a/src/ngircd/conn-ssl.c b/src/ngircd/conn-ssl.c index 7630420..ffb1b10 100644 --- a/src/ngircd/conn-ssl.c +++ b/src/ngircd/conn-ssl.c @@ -52,9 +52,10 @@ static bool ConnSSL_LoadServerKey_openssl PARAMS(( SSL_CTX *c )); #include <gnutls/x509.h> #define DH_BITS 2048 +#define DH_BITS_MIN 1024 + static gnutls_certificate_credentials_t x509_cred; static gnutls_dh_params_t dh_params; - static bool ConnSSL_LoadServerKey_gnutls PARAMS(( void )); #endif @@ -426,7 +427,7 @@ ConnSSL_Init_SSL(CONNECTION *c) ConnSSL_Free(c); return false; } - gnutls_dh_set_prime_bits(c->ssl_state.gnutls_session, DH_BITS); + gnutls_dh_set_prime_bits(c->ssl_state.gnutls_session, DH_BITS_MIN); #endif Conn_OPTION_ADD(c, CONN_SSL); return true;

1 0

Alexander Barton : ngircd.8: document debugging options
by alex＠arthur.barton.de 28 Jun '11

28 Jun '11

Module: ngircd.git Branch: master Commit: 7ae7ace579915dc023722f733f30e941d371cab3 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=7ae7ace5… Author: Alexander Barton <alex(a)barton.de> Date: Tue Jun 28 13:45:16 2011 +0200 ngircd.8: document debugging options --- man/ngircd.8.tmpl | 25 +++++++++++++++++++++++++ 1 files changed, 25 insertions(+), 0 deletions(-) diff --git a/man/ngircd.8.tmpl b/man/ngircd.8.tmpl index d907e6f..9da7ef8 100644 --- a/man/ngircd.8.tmpl +++ b/man/ngircd.8.tmpl @@ -76,6 +76,31 @@ re-initialize the daemon. .SH HINTS It's wise to use "ngircd \-\-configtest" to validate the configuration file after changing it. +.SH DEBUGGING +When ngIRCd is compiled with debug code, that is, its source code has +been ./configure'd with "--enable-debug" and/or "--enable-sniffer" (witch +enables debug mode automatically as well), you can use two more command +line options and two more signals to debug problems with the daemon itself +or IRC clients: +.PP +\fBOptions:\fR +.TP +\fB\-d\fR, \fB\-\-debug\fR +Enable debug mode and log extra messages. +.TP +\fB\-s\fR, \fB\-\-sniffer\fR +Enable IRC protocol sniffer, which logs all sent and received IRC commands to +the console/syslog. This option requires that ngIRCd has been ./configure'd +with "--enable-sniffer" and enables debug mode automatically, too. +.PP +\fBSignals:\fR +.TP +\fBUSR1\fR +Toggle debug mode on and off during runtime. +.TP +\fBUSR2\fR +Dump internal server state to the console/syslog when debug mode is on (use +command line option \-\-debug or signal USR1). .SH AUTHORS Alexander Barton, <alex(a)barton.de> .br

1 0

Alexander Barton : ngircd.8: document debugging options
by alex＠arthur.barton.de 28 Jun '11

28 Jun '11

Module: ngircd.git Branch: master Commit: 91b6c05d1d33c1569d96d6ffcf1277a463ddcb4e URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=91b6c05d… Author: Alexander Barton <alex(a)barton.de> Date: Tue Jun 28 13:39:01 2011 +0200 ngircd.8: document debugging options --- man/ngircd.8.tmpl | 24 ++++++++++++++++++++++++ 1 files changed, 24 insertions(+), 0 deletions(-) diff --git a/man/ngircd.8.tmpl b/man/ngircd.8.tmpl index d907e6f..d0c30e8 100644 --- a/man/ngircd.8.tmpl +++ b/man/ngircd.8.tmpl @@ -76,6 +76,30 @@ re-initialize the daemon. .SH HINTS It's wise to use "ngircd \-\-configtest" to validate the configuration file after changing it. +.SH DEBUGGING +When ngIRCd is compiled with debug code, that is, its source code has been +./configure'd with "--enable-debug" and/or "--enable-sniffer" (witch enables +debug mode automatically as well), you can use two more command line options +and two more signals to debug problems with the daemon itself or IRC clients: +.PP +\fBOptions:\fR +.TP +\fB\-d\fR, \fB\-\-debug\fR +Enable debug mode and log extra messages. +.TP +\fB\-s\fR, \fB\-\-sniffer\fR +Enable IRC protocol sniffer, which logs all sent and received IRC commands to +the console/syslog. This option requires that ngIRCd has been ./configure'd +with "--enable-sniffer" and enables debug mode automatically, too. +.PP +\fBSignals:\fR +.TP +\fBUSR1\fR +Toggle debug mode on and off during runtime. +.TP +\fBUSR2\fR +Dump internal server state to the console/syslog when debug mode is on (use +command line option \-\-debug or signal USR1). .SH AUTHORS Alexander Barton, <alex(a)barton.de> .br

1 0

Alexander Barton : ngircd.conf.5: strip "SSL" prefix from variables in [SSL ] section
by alex＠arthur.barton.de 28 Jun '11

28 Jun '11

Module: ngircd.git Branch: master Commit: 5f400694cfee5bed6be0ac0a5c1638ed9b413c55 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=5f400694… Author: Alexander Barton <alex(a)barton.de> Date: Tue Jun 28 13:21:38 2011 +0200 ngircd.conf.5: strip "SSL" prefix from variables in [SSL] section --- man/ngircd.conf.5.tmpl | 10 +++++----- 1 files changed, 5 insertions(+), 5 deletions(-) diff --git a/man/ngircd.conf.5.tmpl b/man/ngircd.conf.5.tmpl index ccf3d94..38ac40b 100644 --- a/man/ngircd.conf.5.tmpl +++ b/man/ngircd.conf.5.tmpl @@ -314,10 +314,10 @@ All SSL-related configuration variables are located in the section. Please note that this whole section is only recognized by ngIRCd when it is compiled with support for SSL using OpenSSL or GnuTLS! .TP -\fBSSLCertFile\fR (string) +\fBCertFile\fR (string) SSL Certificate file of the private server key. .TP -\fBSSLDHFile\fR (string) +\fBDHFile\fR (string) Name of the Diffie-Hellman Parameter file. Can be created with GnuTLS "certtool \-\-generate-dh-params" or "openssl dhparam". If this file is not present, it will be generated on startup when ngIRCd was compiled with GnuTLS @@ -325,14 +325,14 @@ support (this may take some time). If ngIRCd was compiled with OpenSSL, then (Ephemeral)-Diffie-Hellman Key Exchanges and several Cipher Suites will not be available. .TP -\fBSSLKeyFile\fR (string) +\fBKeyFile\fR (string) Filename of SSL Server Key to be used for SSL connections. This is required for SSL/TLS support. .TP -\fBSSLKeyFilePassword\fR (string) +\fBKeyFilePassword\fR (string) OpenSSL only: Password to decrypt the private key file. .TP -\fBSSLPorts\fR (list of numbers) +\fBPorts\fR (list of numbers) Same as \fBPorts\fR , except that ngIRCd will expect incoming connections to be SSL/TLS encrypted. Common port numbers for SSL-encrypted IRC are 6669 and 6697. Default: none.

1 0

Alexander Barton : Fix some wording, use spellchecker ; -)
by alex＠arthur.barton.de 28 Jun '11

28 Jun '11

Module: ngircd.git Branch: master Commit: bd118c65fdb1428daf4775205b0f40918b3f22fb URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=bd118c65… Author: Alexander Barton <alex(a)barton.de> Date: Tue Jun 28 13:12:06 2011 +0200 Fix some wording, use spellchecker ;-) --- ChangeLog | 20 ++++++++++---------- INSTALL | 2 +- NEWS | 10 +++++----- doc/sample-ngircd.conf.tmpl | 6 +++--- man/ngircd.8.tmpl | 4 ++-- man/ngircd.conf.5.tmpl | 6 +++--- 6 files changed, 24 insertions(+), 24 deletions(-) Diff: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commitdiff;h=bd11…

1 0

Alexander Barton : doc/SSL.txt: adopt to new configuration file layout
by alex＠arthur.barton.de 28 Jun '11

28 Jun '11

Module: ngircd.git Branch: master Commit: 29c49f643fdaa5db2604d129a2dc3814e3f54700 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=29c49f64… Author: Alexander Barton <alex(a)barton.de> Date: Tue Jun 28 13:11:14 2011 +0200 doc/SSL.txt: adopt to new configuration file layout --- doc/SSL.txt | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/doc/SSL.txt b/doc/SSL.txt index b98c2fb..28ea2cd 100644 --- a/doc/SSL.txt +++ b/doc/SSL.txt @@ -34,7 +34,7 @@ possible to handle unencrypted and encrypted connections on the same port! This is a limitation of the IRC protocol ... You have to set (at least) the following configuration variables in the -[GLOBAL] section of ngircd.conf(5): SSLPorts, SSLKeyFile, and SSLCertFile. +[SSL] section of ngircd.conf(5): Ports, KeyFile, and CertFile. Now IRC clients are able to connect using SSL on the configured port(s). (Using port 6697 for encrypted connections is common.)

1 0

Tag rel-18-rc1: Alexander Barton : ngIRCd release 18~rc1
by alex＠arthur.barton.de 27 Jun '11

27 Jun '11

Module: ngircd.git Branch: refs/tags/rel-18-rc1 Tag: b98892464bed5498a771ea325a8d0b54bd54270e URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=tag;h=b98892464be… Tagger: Alexander Barton <alex(a)barton.de> Date: Mon Jun 27 23:00:52 2011 +0200 ngIRCd release 18~rc1

1 0

Alexander Barton : ngIRCd release 18~rc1
by alex＠arthur.barton.de 27 Jun '11

27 Jun '11

Module: ngircd.git Branch: master Commit: b6185b1ac8dedfc3a0f261c82aaf1facde5b55ee URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=b6185b1a… Author: Alexander Barton <alex(a)barton.de> Date: Mon Jun 27 23:00:30 2011 +0200 ngIRCd release 18~rc1 --- ChangeLog | 2 +- NEWS | 2 +- contrib/Debian/changelog | 6 ++++++ contrib/ngircd.spec | 2 +- 4 files changed, 9 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index 9108083..ce68efc 100644 --- a/ChangeLog +++ b/ChangeLog @@ -11,7 +11,7 @@ ngIRCd Release 18 - ngIRCd 18~rc1 + ngIRCd 18~rc1 (2011-06-27) - PAM warning message: make clear which "Password" config option is ignored. - New configuration opion "MorePrivacy" to "censor" some user information. When enabled, signon time and idle time is censored. Part and quit diff --git a/NEWS b/NEWS index 65a1eea..1d7e049 100644 --- a/NEWS +++ b/NEWS @@ -10,7 +10,7 @@ ngIRCd Release 18 - ngIRCd 18~rc1 + ngIRCd 18~rc1 (2011-06-27) - New configuration opion "MorePrivacy" to "censor" some user information. When enabled, signon time and idle time is censored. Part and quit messages are made to look the same. WHOWAS requests are silently dropped. diff --git a/contrib/Debian/changelog b/contrib/Debian/changelog index 06e9194..1b7997e 100644 --- a/contrib/Debian/changelog +++ b/contrib/Debian/changelog @@ -1,3 +1,9 @@ +ngircd (18~rc1-0ab1) unstable; urgency=low + + * New "upstream" release candidate 1 for ngIRCd Release 18. + + -- Alexander Barton <alex(a)barton.de> Mon, 27 Jun 2011 22:58:36 +0200 + ngircd (17.1-0ab1) unstable; urgency=low * New "upstream" release: ngIRCd 17.1. diff --git a/contrib/ngircd.spec b/contrib/ngircd.spec index da0c2f7..6a2165b 100644 --- a/contrib/ngircd.spec +++ b/contrib/ngircd.spec @@ -1,5 +1,5 @@ %define name ngircd -%define version 17.1 +%define version 18~rc1 %define release 1 %define prefix %{_prefix}

1 0