Find a file
Aaron Jones 1e7342d0f4
[mbedtls] Various fixes and improvements
* Move certificate, key, DH parameters and configuration to heap
  (Documentation states that setting new configuration, e.g.
   during a rehash, is unsupported while connections using that
   configuration are active)

  This is the same approach as the fix for #186

  Refcount these structures so as to not introduce a memory leak

  On rehash, it will use new structures only if there are no
  errors in constructing them

* Make fingerprint generation work for TLS connections

  See the comments in the newly created file for an explanation

* Fix memory leak when generating a fingerprint from a file

* Add better error-reporting (strings in addition to numbers)
  where possible

* Coalesce several connection memory allocations into one function

* Reduce boilerplate where possible (Charybdis targets C99)

* Support private key being in certificate file, and having no
  DH parameters file

* Correct erroneous closing comment
2016-05-05 03:47:57 +00:00
authd authd: fix reference far off the end of the array on shutdown 2016-05-01 11:51:07 +01:00
bandb bandb: update sqlite3 to 3.12.0 2016-03-29 13:29:18 -05:00
doc ircd.conf.example: use certfp_method = spki_sha256 2016-04-25 23:52:18 +01:00
extensions ipv4_from_ipv6: move to librb 2016-04-08 03:49:23 -05:00
help Really fix the help index. 2016-03-12 06:26:50 -06:00
include random_ping: stop producing negative values that become 16 chars 2016-05-02 21:14:16 +01:00
ircd [sslproc] Allow absense of private key file 2016-05-05 03:47:18 +00:00
librb [mbedtls] Various fixes and improvements 2016-05-05 03:47:57 +00:00
m4 Remove more $Id tags. 2016-03-06 02:58:32 -06:00
modules random_ping: stop producing negative values that become 16 chars 2016-05-02 21:14:16 +01:00
scripts Make release scripts less out of date. 2016-03-21 08:32:21 -05:00
ssld Fix possible crash when DH parameters are not provided 2016-05-03 17:49:00 +00:00
testsuite testsuite: Update startall.sh 2016-03-28 00:09:01 -04:00
tools mkfingerprint: use certfp method names from certfp.h 2016-04-26 20:58:16 +01:00
wsockd authd: Avoid negative array indices 2016-04-22 23:06:42 -04:00
.appveyor-build.sh appveyor: make the build less hacky 2016-03-25 18:25:00 -05:00
.appveyor.yml Appveyor: fix build 2016-04-02 17:47:23 -05:00
.gitignore add mkfingerprint program 2016-04-26 20:49:03 +01:00
.mailmap mailmap: Sam is Christine now apparently. 2016-03-17 14:48:46 -05:00
.travis.yml travis: install shtool. 2016-04-10 16:53:40 -05:00
autogen.sh *sigh* comment these out until travis is fixed. 2016-04-10 17:12:42 -05:00
configure.ac stage for charybdis 4-beta1. 2016-04-30 19:58:14 -05:00
CREDITS Formatting fixes for credits 2016-04-09 04:55:57 -05:00
LICENSE Remove more $Id tags. 2016-03-06 02:58:32 -06:00
Makefile.am Properly clean up build artifacts. 2016-04-09 04:55:57 -05:00
NEWS.md stage for charybdis 4-beta1. 2016-04-30 19:58:14 -05:00
README.md README: put git command in backticks [ci skip] 2016-04-10 17:15:46 -05:00
shtool Add these for now until travis actually gets their shit together. 2016-04-10 17:07:33 -05:00

charybdis POSIX Build Status Windows Build Status

Charybdis is an IRCv3 server designed to be highly scalable. It implements IRCv3.1 and some parts of IRCv3.2.

It is meant to be used with an IRCv3-capable services implementation such as Atheme or Anope.

necessary requirements

  • A supported platform
  • A working dynamic library system
  • A working lex and yacc - flex and bison should work

platforms

Charybdis is designed with portability in mind, but does not target older systems nor those of solely academic interest.

Do note that operating systems are only supported if they are supported by their vendor.

Tier 1

These platforms are the best supported, and should always work. They are actively tested. If you encounter problems, please file a bug.

  • FreeBSD 10.x and above (i386 and amd64)
  • Linux 2.6.x and above with glibc or musl (i386, x86_64, and ARM)
  • Mac OS X 10.7 and above
  • Windows Vista/Server 2008 and above (x86 or x64)

Tier 2

These platforms are supported and occasionally tested, and most features should work, but this is not guaranteed. If you find any problems, file a bug, but as these are not regularly tested platforms, a timely resolution may not be possible.

  • DragonflyBSD 4.4 and above (i386)
  • Linux with uClibc (i386 or x86_64)
  • NetBSD 6.1.x and above (i386, amd64)
  • OpenBSD 5.6 and above (i386, amd64)
  • Solaris 10 and above (i386)

Tier 3

Anything else that hasn't been tested. Charybdis may or may not work on it; patches welcome if they don't.

platform specific errata

These are known issues and workarounds for supported platforms.

  • FreeBSD: if you are compiling with ipv6 you may experience problems with ipv4 due to the way the socket code is written. To fix this you must: "sysctl net.inet6.ip6.v6only=0"

  • Solaris: you may have to set your PATH to include /usr/gnu/bin and /usr/gnu/sbin before /usr/bin and /usr/sbin. Solaris's default tools don't seem to play nicely with the configure script.

building from git

We no longer supply a prebuilt configure script in git, due to use of automake and libtool causing problems. You will need to run autogen.sh to build the autotools files prior to building charybdis.

feature specific requirements

  • For SSL/TLS client and server connections, one of:

    • OpenSSL 1.0 or newer
    • LibreSSL
    • mbedTLS
    • GnuTLS
  • For certificate-based oper CHALLENGE, OpenSSL 1.0 or newer. (Using CHALLENGE is not recommended for new deployments, so if you want to use a different TLS library, feel free.)

  • For ECDHE, OpenSSL 1.0.0 or newer is required. Solaris; and RHEL/Fedora and its derivatives such as CentOS have removed support for ECC/ECDHE. You will need to compile your own OpenSSL on these systems.

tips

  • To report bugs in charybdis, visit us at irc.freenode.net #charybdis

  • Please read doc/index.txt to get an overview of the current documentation.

  • Read the NEWS file for what's new in this release.

  • The files, /etc/services, /etc/protocols, and /etc/resolv.conf, SHOULD be readable by the user running the server in order for ircd to start with the correct settings. If these files are wrong, charybdis will try to use 127.0.0.1 for a resolver as a last-ditch effort.

git access

  • The Charybdis GIT repository can be checked out using the following command: git clone https://github.com/charybdis-ircd/charybdis

  • Charybdis's GIT repository depot can be browsed over the Internet at the following address: https://github.com/charybdis-ircd/charybdis