ngircd/doc, branch master

Implement new configuration option "DefaultChannelModes"

2025-12-19T16:23:16+00:00

The new configuration option "DefaultChannelModes" lists channel modes that become automatically set on new channels on creation. Default: set no modes. Closes #333.

Improve "CloakHostModeX" documentation

2025-09-12T18:54:56+00:00

Closes #334.

Update documentation on CAFile

2024-08-04T16:05:10+00:00

ngIRCd 27 now checks server certificates, and without `CAFile` set will reject all server/server connections with a confusing error. Update documentation to say that `CAFile` is needed to accept incoming server connections. Closes #320.

Update doc/Platforms.txt

2024-04-26T12:18:32+00:00

Clarify that "CAFile" is not set by default

2024-04-19T21:49:59+00:00

Update doc/Platforms.txt

2024-04-11T20:11:38+00:00

Fix quoting in code examples in doc/Container.md

2024-03-31T09:19:48+00:00

S2S-TLS: Convert SSL.txt to Markdown and update information given

2024-03-23T19:19:01+00:00

No longer describe creating self-signed certificates or using "stunnel", as both is not recommended.

Support for server certificate validation on server links [S2S-TLS]

2024-03-23T19:19:01+00:00

This patch provides code to validate the server certificate in server links, defeating nasty man-in-the-middle attacks on server links. Features: - Check whether the certificate is signed by a trusted certificate authority (CA). - Check the host name, including wildcard certificates and Subject Alternative Names. - Optionally check against a certificate revocation list (CRL). - Implementation for both OpenSSL and GnuTLS linkage. Left for another day: - Parameterize the TLS parameter of an outbound connection. Currently, it's hardcoded to disable all versions before TLSv1.1. - Using certificate as CA-certificate. They work for GnuTLS only but perhaps this should rather raise an error there, too. - Optional OCSP checking. - Checking client certificates. Code is there but this first needs some consideration about the use cases. This could replace all other authentication methods, for both client-server and server-server connections. This patch is based on a patch by Florian Westphal from 2009, which implemented this for OpenSSL only: From: Florian Westphal Date: Mon, 18 May 2009 00:29:02 +0200 Subject: SSL/TLS: Add initial certificate support to OpenSSL backend Commit message modified by Alex Barton. Closes #120, "Server links using TLS/SSL need certificate validation". Supersedes PR #8, "Options for verifying and requiring SSL client certificates", which had (incomplete?) code for OpenSSL, no GnuTLS.

QuickStart.md: Tweak the text a bit ...

2024-03-17T21:42:19+00:00