- ngIRCd GIT Updates - lists.barton.de

Alexander Barton : doc/SSL.txt: enhance documentation.
by alex＠arthur.barton.de 04 Dez '08

04 Dez '08

Module: ngircd.git Branch: master Commit: e070d93f649f76a57ce4c01782887e375f3cfba3 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=e070d93f… Author: Alexander Barton <alex(a)barton.de> Date: Thu Dec 4 13:20:38 2008 +0100 doc/SSL.txt: enhance documentation. --- doc/SSL.txt | 79 ++++++++++++++++++++++++++++++++++++++-------------------- 1 files changed, 52 insertions(+), 27 deletions(-) diff --git a/doc/SSL.txt b/doc/SSL.txt index 6ea207e..6b590b8 100644 --- a/doc/SSL.txt +++ b/doc/SSL.txt @@ -1,7 +1,7 @@ ngIRCd - Next Generation IRC Server - (c)2001-2004 by Alexander Barton, + (c)2001-2008 Alexander Barton, alex(a)barton.de, http://www.barton.de/ ngIRCd is free software and published under the @@ -10,39 +10,70 @@ -- SSL.txt -- -ngIRCd supports SSL/TLSv1 encrypted connections using the -OpenSSL or gnutls library. -Both encryped server <-> client and server <-> server links should work. +ngIRCd supports SSL/TLSv1 encrypted connections using the OpenSSL or GnuTLS +libraries. Both encrypted server-server links as well as client-server links +are supported. -BEWARE! The Code is mostly untested, use at your own risk! +SSL is a compile-time option which is disabled by default. Use one of these +options of the ./configure script to enable it: -Example that creates a self-signed certificate and key (using OpenSSL): -openssl req -newkey rsa:2048 -x509 -keyout server-key.pem \ - -out server-cert.pem -days 1461 + --with-openssl enable SSL support using OpenSSL + --with-gnutls enable SSL support using GnuTLS -Example that creates DH parameters (optional): -openssl dhparam -2 -out dhparams.pem 2048 +You need a SSL certificate, see below for how to create a self-signed one. -Example that creates a self-signed certificate -and key (using gnutls): -certtool --generate-privkey --bits 2048 --outfile server-key.pem -certtool --generate-self-signed --load-privkey server-key.pem \ - --outfile server-cert.pem +Configuration +~~~~~~~~~~~~~ -Example that creates DH parameters (optional): -certtool --generate-dh-params --bits 2048 --outfile dhparams.pem +To enable SSL connections a separate port must be configured: it is NOT +possible to handle unencrypted and encrypted connections on the same port! +This is a limitation of the IRC protocol ... -Alternatively, you may use external programs/tools like stunnel to -make it work: +You have to set (at least) the following configuration variables in the +[GLOBAL] section of ngircd.conf(5): SSLPorts, SSLKeyFile, and SSLCertFile. + +Now IRC clients are able to connect using SSL on the configured port(s). +(Using port 6697 for encrypted connections is common.) + +To enable encrypted server-server links, you have to additionally set +SSLConnect to "yes" in the corresponding [SERVER] section. + + +Creating a self-signed certificate +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +OpenSSL: + +Creating a self-signed certificate and key: + $ openssl req -newkey rsa:2048 -x509 -keyout server-key.pem \ + -out server-cert.pem -days 1461 +Create DH parameters (optional): + $ openssl dhparam -2 -out dhparams.pem 2048 + +GnuTLS: + +Creating a self-signed certificate and key: + $ certtool --generate-privkey --bits 2048 --outfile server-key.pem + $ certtool --generate-self-signed --load-privkey server-key.pem \ + --outfile server-cert.pem +Create DH parameters (optional): + $ certtool --generate-dh-params --bits 2048 --outfile dhparams.pem + + +Alternate approach using stunnel(1) +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Alternatively (or if you are using ngIRCd without compiled without support +for GnuTLS/OpenSSL), you can use external programs/tools like stunnel(1) to +get SSL encrypted connections: <http://stunnel.mirt.net/> <http://www.stunnel.org/> -Stefan Sperling (stefan at binarchy dot net) mailed me the following text as a +Stefan Sperling (stefan at binarchy dot net) mailed the following text as a short "how-to", thanks Stefan! - === snip === ! This guide applies to stunnel 4.x ! @@ -71,9 +102,3 @@ short "how-to", thanks Stefan! That's it. Don't forget to activate ssl support in your irc client ;) === snip === - - - - --- -$Id: SSL.txt,v 1.2 2004/12/27 01:11:40 alex Exp $

1 0

Alexander Barton : doc/Services.txt: explain which IRC Services versions are compatible
by alex＠arthur.barton.de 04 Dez '08

04 Dez '08

Module: ngircd.git Branch: master Commit: 1519afa391d7cb33957892fded23e1b1e178f1f3 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=1519afa3… Author: Alexander Barton <alex(a)barton.de> Date: Thu Dec 4 11:14:26 2008 +0100 doc/Services.txt: explain which IRC Services versions are compatible --- doc/Services.txt | 21 ++++++++++++++++----- 1 files changed, 16 insertions(+), 5 deletions(-) diff --git a/doc/Services.txt b/doc/Services.txt index a16cfc8..67053b1 100644 --- a/doc/Services.txt +++ b/doc/Services.txt @@ -14,7 +14,7 @@ At the moment, ngIRCd doesn't implement a "special IRC services interface". But services acting as a "regular server" are supported, either using the IRC protocol defined in RFC 1459 or RFC 2812. -Services have been tested using "IRC Services" version 5.x of Andrew Church, +Services have been tested using "IRC Services" version 5.x by Andrew Church, homepage: <http://www.ircservices.za.net/>. This document describes setting up ngIRCd and these services. @@ -25,7 +25,7 @@ Setting up ngIRCd The "pseudo server" handling the IRC services is configured as a regular remote server in the ngircd.conf(5). In addition the variable "ServiceMask" should be set, enabling this ngIRCd to recognize the "pseudo users" as IRC -services insted of regular IRC users. +services instead of regular IRC users. Example: @@ -39,9 +39,17 @@ Example: Setting up IRC Services 5.1.x ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -IRC Services 5.1.x can be used with ngIRCd using the "rfc1459" protocol -module. At least the following settings have to be tweaked, in addition to all -the settings marked as required by IRC Services: +IRC Services 5.1.3 and above can be used with ngIRCd using the "rfc1459" +protocol module. + +Please note that versions up to and including 5.1.3 contain a bug that +sometimes causes IRC Services to hang on startup. There are two workarounds: + a) send the services process a HUP signal ("killall -HUP ircservices") + b) apply this patch to the IRC Services source tree: + <ftp://ngircd.barton.de/ngircd/contrib/IRCServices513-FlushBuffer.patch> + +At least the following settings have to be tweaked, in addition to all the +settings marked as required by IRC Services: In ircservices.conf: @@ -57,3 +65,6 @@ In modules.conf: The documentation of IRC Services can be found here: <http://www.ircservices.za.net/docs/> + +Please let us know if you are successfully using other IRC service packages or +which problems you encounter, thanks!

1 0

Alexander Barton : Testsuite start-server.sh: return correct exit code.
by alex＠arthur.barton.de 03 Dez '08

03 Dez '08

Module: ngircd.git Branch: master Commit: 85ce82e504d4cd7d505d215c973e55cf14101cd8 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=85ce82e5… Author: Alexander Barton <alex(a)barton.de> Date: Wed Dec 3 16:49:55 2008 +0100 Testsuite start-server.sh: return correct exit code. src/testsuite/start-server.sh returns 0 when no errors occurred and the daemon has been startet and 1 on errors. Always returning 0 is wrong ... --- src/testsuite/start-server.sh | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/testsuite/start-server.sh b/src/testsuite/start-server.sh index 15fa3f0..90832a3 100755 --- a/src/testsuite/start-server.sh +++ b/src/testsuite/start-server.sh @@ -45,6 +45,6 @@ pid=`./getpid.sh T-ngircd${id}` [ -n "$pid" ] && kill -0 $pid > /dev/null 2>&1; r=$? [ $r -eq 0 ] && echo " ok." || echo " failure!" -exit +exit $r # -eof-

1 0

Alexander Barton : Make testsuite (getpid.sh) work on OpenSolaris (i386/pc/ solaris2.11).
by alex＠arthur.barton.de 03 Dez '08

03 Dez '08

Module: ngircd.git Branch: master Commit: 83c699d5a559acecc9b62767e4ffcf8fb50dfbb5 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=83c699d5… Author: Alexander Barton <alex(a)barton.de> Date: Wed Dec 3 16:49:17 2008 +0100 Make testsuite (getpid.sh) work on OpenSolaris (i386/pc/solaris2.11). --- src/testsuite/getpid.sh | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/src/testsuite/getpid.sh b/src/testsuite/getpid.sh index 0d94519..5e16917 100755 --- a/src/testsuite/getpid.sh +++ b/src/testsuite/getpid.sh @@ -7,12 +7,14 @@ # detect flags for "ps" and "head" UNAME=`uname` -if [ $UNAME = "FreeBSD" -o $UNAME = "SunOS" ]; then +if [ $UNAME = "FreeBSD" ]; then PS_FLAGS="-a"; PS_PIDCOL="1"; HEAD_FLAGS="-n 1" elif [ $UNAME = "A/UX" ]; then PS_FLAGS="-ae"; PS_PIDCOL="1"; HEAD_FLAGS="-1" elif [ $UNAME = "GNU" ]; then PS_FLAGS="-ax"; PS_PIDCOL="2"; HEAD_FLAGS="-n 1" +elif [ $UNAME = "SunOS" ]; then + PS_FLAGS="-af"; PS_PIDCOL=2; HEAD_FLAGS="-n 1" else PS_FLAGS="-f"; PS_PIDCOL="2"; HEAD_FLAGS="-n 1" ps $PS_FLAGS > /dev/null 2>&1

1 0

Alexander Barton : doc/Services.txt: document using ngIRCd with IRC Services.
by alex＠arthur.barton.de 03 Dez '08

03 Dez '08

Module: ngircd.git Branch: master Commit: 56cf95278e24fb2df8742bcfddd2d6ea0a61accb URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=56cf9527… Author: Alexander Barton <alex(a)barton.de> Date: Tue Dec 2 15:41:57 2008 +0100 doc/Services.txt: document using ngIRCd with IRC Services. --- doc/Makefile.am | 5 ++- doc/Services.txt | 59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 62 insertions(+), 2 deletions(-) diff --git a/doc/Makefile.am b/doc/Makefile.am index 394c89b..eba97d9 100644 --- a/doc/Makefile.am +++ b/doc/Makefile.am @@ -1,6 +1,6 @@ # # ngIRCd -- The Next Generation IRC Daemon -# Copyright (c)2001-2008 by Alexander Barton (alex(a)barton.de) +# Copyright (c)2001-2008 Alexander Barton (alex(a)barton.de) # # Dieses Programm ist freie Software. Sie koennen es unter den Bedingungen # der GNU General Public License (GPL), wie von der Free Software Foundation @@ -13,7 +13,8 @@ SUBDIRS = src EXTRA_DIST = FAQ.txt GIT.txt Protocol.txt Platforms.txt README-AUX.txt \ - README-BeOS.txt RFC.txt SSL.txt Zeroconf.txt sample-ngircd.conf + README-BeOS.txt RFC.txt Services.txt SSL.txt Zeroconf.txt \ + sample-ngircd.conf maintainer-clean-local: rm -f Makefile Makefile.in diff --git a/doc/Services.txt b/doc/Services.txt new file mode 100644 index 0000000..a16cfc8 --- /dev/null +++ b/doc/Services.txt @@ -0,0 +1,59 @@ + + ngIRCd - Next Generation IRC Server + + (c)2001-2008 Alexander Barton, + alex(a)barton.de, http://www.barton.de/ + + ngIRCd is free software and published under the + terms of the GNU General Public License. + + -- Services.txt -- + + +At the moment, ngIRCd doesn't implement a "special IRC services interface". +But services acting as a "regular server" are supported, either using the IRC +protocol defined in RFC 1459 or RFC 2812. + +Services have been tested using "IRC Services" version 5.x of Andrew Church, +homepage: <http://www.ircservices.za.net/>. This document describes setting up +ngIRCd and these services. + + +Setting up ngIRCd +~~~~~~~~~~~~~~~~~ + +The "pseudo server" handling the IRC services is configured as a regular +remote server in the ngircd.conf(5). In addition the variable "ServiceMask" +should be set, enabling this ngIRCd to recognize the "pseudo users" as IRC +services insted of regular IRC users. + +Example: + + [SERVER] + Name = services.irc.net + MyPassword = 123abc + PeerPassword = 123abc + ServiceMask = *Serv + + +Setting up IRC Services 5.1.x +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +IRC Services 5.1.x can be used with ngIRCd using the "rfc1459" protocol +module. At least the following settings have to be tweaked, in addition to all +the settings marked as required by IRC Services: + +In ircservices.conf: + + Variable Example value + + RemoteServer server.irc.net 6667 "123abc" + ServerName "services.irc.net" + LoadModule protocol/rfc1459 + +In modules.conf: + + Module protocol/rfc1459 + +The documentation of IRC Services can be found here: +<http://www.ircservices.za.net/docs/>

1 0

Alexander Barton : sample-ngircd.conf: remove now unused CVS "$Id$"
by alex＠arthur.barton.de 22 Nov '08

22 Nov '08

Module: ngircd.git Branch: master Commit: d0b2526a01c57f54e3899d4c8fd878005d701116 URL: http://ngircd.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git&a=commit;h=d0b2526a… Author: Alexander Barton <alex(a)barton.de> Date: Sat Nov 22 14:47:01 2008 +0100 sample-ngircd.conf: remove now unused CVS "$Id$" --- doc/sample-ngircd.conf | 9 ++++----- 1 files changed, 4 insertions(+), 5 deletions(-) diff --git a/doc/sample-ngircd.conf b/doc/sample-ngircd.conf index ee60729..041542e 100644 --- a/doc/sample-ngircd.conf +++ b/doc/sample-ngircd.conf @@ -1,14 +1,13 @@ -# $Id: sample-ngircd.conf,v 1.44 2008/01/07 23:02:29 alex Exp $ - # -# This is a sample configuration file for the ngIRCd, which must be adepted -# to the local preferences and needs. +# This is a sample configuration file for the ngIRCd IRC daemon, which must +# be customized to the local preferences and needs. # # Comments are started with "#" or ";". # # A lot of configuration options in this file start with a ";". You have # to remove the ";" in front of each variable to actually set a value! -# The disabled variables are shown with example values for completeness. +# The disabled variables are shown with example values for completeness only +# and the daemon is using compiled-in default settings. # # Use "ngircd --configtest" (see manual page ngircd(8)) to validate that the # server interprets the configuration file as expected!

1 0

[ngIRCd-CVS-ML] ChangeLog NEWS
by alex＠arthur.barton.de 22 Nov '08

22 Nov '08

Update of /srv/cvs/ngircd/website/doc In directory Arthur:/tmp/cvs-serv30096 Modified Files: ChangeLog NEWS Log Message: Updated NEWS and ChangeLog for ngIRCd 13~rc1 Diff omitted, please use cvs directly or the web frontend located at <http://arthur.ath.cx/cgi-bin/viewcvs.cgi/ngircd/>.

1 0

[ngIRCd-CVS-ML] index.html.de index.html.en
by alex＠arthur.barton.de 21 Nov '08

21 Nov '08

Update of /srv/cvs/ngircd/website In directory Arthur:/tmp/cvs-serv30542 Modified Files: index.html.de index.html.en Log Message: ngIRCd 13~rc1 Diff omitted, please use cvs directly or the web frontend located at <http://arthur.ath.cx/cgi-bin/viewcvs.cgi/ngircd/>.

1 0

[ngIRCd-CVS-ML] AUTHORS ChangeLog FAQ.txt NEWS Platforms.txt Protocol.txt README-AUX.txt README-BeOS.txt RFC.txt SSL.txt Zeroconf.txt sample-ngircd.conf
by alex＠arthur.barton.de 21 Nov '08

21 Nov '08

Update of /srv/cvs/ngircd/website/doc In directory Arthur:/tmp/cvs-serv30474/doc Modified Files: AUTHORS ChangeLog FAQ.txt NEWS Platforms.txt Protocol.txt README-AUX.txt README-BeOS.txt RFC.txt SSL.txt Zeroconf.txt sample-ngircd.conf Log Message: Updated documentation files for ngIRCd 13~rc1 Diff omitted, please use cvs directly or the web frontend located at <http://arthur.ath.cx/cgi-bin/viewcvs.cgi/ngircd/>.

1 0

[ngIRCd-CVS-ML] index.html.de index.html.en
by alex＠arthur.barton.de 12 Aug '08

12 Aug '08

Update of /srv/cvs/ngircd/website In directory Arthur:/tmp/cvs-serv29570 Modified Files: index.html.de index.html.en Log Message: Added Fedora Linux to packages section. Diff omitted, please use cvs directly or the web frontend located at <http://arthur.ath.cx/cgi-bin/viewcvs.cgi/ngircd/>.

1 0