ngircd/man, branch master

Use simpler build system

2026-01-15T11:45:26+00:00

Implement new configuration option "DefaultChannelModes"

2025-12-19T16:23:16+00:00

The new configuration option "DefaultChannelModes" lists channel modes that become automatically set on new channels on creation. Default: set no modes. Closes #333.

Improve "CloakHostModeX" documentation

2025-09-12T18:54:56+00:00

Closes #334.

Update manual page dates

2024-08-18T09:57:34+00:00

Clarify that "CAFile" is not set by default

2024-04-19T21:49:59+00:00

ngircd.8: Update for the now always available debug-mode

2024-03-31T09:19:48+00:00

S2S-TLS: Fix formatting and sort new SSL options in ngircd.conf manual page

2024-03-23T19:19:01+00:00

Support for server certificate validation on server links [S2S-TLS]

2024-03-23T19:19:01+00:00

This patch provides code to validate the server certificate in server links, defeating nasty man-in-the-middle attacks on server links. Features: - Check whether the certificate is signed by a trusted certificate authority (CA). - Check the host name, including wildcard certificates and Subject Alternative Names. - Optionally check against a certificate revocation list (CRL). - Implementation for both OpenSSL and GnuTLS linkage. Left for another day: - Parameterize the TLS parameter of an outbound connection. Currently, it's hardcoded to disable all versions before TLSv1.1. - Using certificate as CA-certificate. They work for GnuTLS only but perhaps this should rather raise an error there, too. - Optional OCSP checking. - Checking client certificates. Code is there but this first needs some consideration about the use cases. This could replace all other authentication methods, for both client-server and server-server connections. This patch is based on a patch by Florian Westphal from 2009, which implemented this for OpenSSL only: From: Florian Westphal Date: Mon, 18 May 2009 00:29:02 +0200 Subject: SSL/TLS: Add initial certificate support to OpenSSL backend Commit message modified by Alex Barton. Closes #120, "Server links using TLS/SSL need certificate validation". Supersedes PR #8, "Options for verifying and requiring SSL client certificates", which had (incomplete?) code for OpenSSL, no GnuTLS.

Bring manual page more in line with README.md and homepage

2024-03-23T18:58:23+00:00

Use a default "IncludeDir" only when no config file was specified

2024-01-21T19:15:47+00:00

No longer use a default built-in value for the "IncludeDir" directive when a configuration file was explicitly specified on the command line using "--config"/"-f": This way no default include directory is scanned when a possibly non-default configuration file is used which (intentionally) did not specify an "IncludeDir" directive. With this patch you now can use "-f /dev/null" for checking all built-in defaults, regardless of any local configuration files in the default drop-in directory (which would have been read in until this change).