branches/1.1.x/NEWS

-- Noteworthy changes in version 1.1.10 (2021-01-30)
* Timers have been changed to use monotonic time instead of wall-clock time
* Fixed broken build with LibreSSL


-- Noteworthy changes in version 1.1.9 (2020-11-16)
* Implemented support for loading a user-provided private key and tls client
  certificate. The `irc::rsa_private_key_file`and `irc::tls_certificate_file`
  configuration directives have been added for this.
  As a side effect this now allows HOPM to use certificate fingerprints for
  NickServ authentication
* The `vhost` configuration directive found in the irc {} and scanner {} blocks
  has been renamed to `bind`


-- Noteworthy changes in version 1.1.8 (2020-07-05)
* Minimum supported OpenSSL version is 1.1.1 now
* Experimental TLS support for the irc client part has been implemented. We
  only do TLSv1.2 and higher
* The `irc::tls` and `irc::tls_hostname_verification` configuration directives
  have been added
* A possible out-of-bounds write in the irc parser logic has been fixed


-- Noteworthy changes in version 1.1.7 (2020-04-19)
* Fixed github issue #31: hopm attempts to open stderr for logging in
  non-debug/fork mode which can cause hopm to exit silently


-- Noteworthy changes in version 1.1.6 (2019-04-21)
* Fixed issue with ssh banner scans where hopm would test connections only
  against the `target_string` that's defined last in the scanner{} block
* Minimum supported OpenSSL version is 1.0.1f now


-- Noteworthy changes in version 1.1.5 (2018-10-14)
* The `:`, and `,` nickname delimiters work again
* Fixed a bug where the hopm process couldn't be restarted under certain
  conditions
* The hopm process can now be restarted from the command line via `kill -HUP`
* Added `--enable-efence` switch to allow easy linking with the
  electric fence memory debugger library
* Implemented proper support to kill users with vulnerable SSH versions by
  version announcement. Patch provided by falsovsky (Pedro de Oliveira). See
  `doc/reference.conf` for more information.
* Minimum supported OpenSSL version is 1.0.1d now


-- Noteworthy changes in version 1.1.4 (2017-04-05)
* IPv6 blacklist support has been implemented
* The `CHECK` command now accepts IPv6 addresses
* The negative cache has been rewritten to use latest Net::Patricia C sources
  and does support IPv6 now


-- Noteworthy changes in version 1.1.3 (2016-09-26)
* Allow inclusion of other configuration files in the main `hopm.conf` file.
  See `doc/reference.conf` for further information on how to use the new
  `.include` configuration directive.


-- Noteworthy changes in version 1.1.2 (2016-05-15)
* Fixed archaic bug which can cause the scanner to either detect nothing or to
  detect everything and therefore even kill legit clients


-- Noteworthy changes in version 1.1.1 (2016-01-03)
* Added `command_queue_size`, `command_interval`, and `command_timeout`,
  configuration directives to the options {} block. See `doc/reference.conf`
  for more information.
* Various updates to the `reference.conf`; added updated `connregex` directives
  for ircd-hybrid in conjunction with user mode +F (far connect notices), and
  UnrealIRCd 4.0.0, which now uses a different format for connect notices


-- Noteworthy changes in version 1.1.0 (2015-08-07)
* `options::pidfile` and `options::scanlog` can now be relative pathnames
* Due to security reasons the `PROTOCOLS` command has been removed again


-- Noteworthy changes in version 1.1.0beta1 (2015-07-02)
* Added HTTPS support for SSL/TLS-enabled HTTP proxies which seem to be used
  quite a lot on IRC nowadays. LibreSSL or OpenSSL 0.9.8o and above is required
  for this to work.
* Added new `HTTPS` and `HTTPSPOST` protocol configuration directives to the
  scanner {} block


-- Noteworthy changes in version 1.0.8 (2015-06-25)
* Added `options::reconnectinterval` configuration option. See `doc/reference.conf`
  for more information.
* Added `options::dns_timeout` configuration option. See `doc/reference.conf`
  for more information.
* Further modernizations and cleanups to the build system
* HOPM now compiles with `-fstack-protector-strong` and `-fstack-protector`,
  respectively, depending on what the compiler supports
* Added `--enable-assert` switch to `./configure`. assert() statements are now
  disabled by default and can be enabled with `./configure --enable-assert`
* Added `--enable-warnings` switch to `./configure`, which enables various
  compiler warnings if supported by the compiler


-- Noteworthy changes in version 1.0.7 (2015-06-06)
* HOPM can now detect Dreamboxes with default root passwords
* Fixed bug where the configuration parser would report syntax errors with
  invalid line numbers when there are multi-line C-style comments in the
  config file


-- Noteworthy changes in version 1.0.6 (2015-05-27)
* HOPM now catches MikroTik HttpProxies


-- Noteworthy changes in version 1.0.5 (2015-05-04)
* Fixed bug where HOPM couldn't connect to the server specified in the irc {}
  block on some OS


-- Noteworthy changes in version 1.0.4 (2015-03-17)
* Log timestamp format is ISO8601 now
* Added `protocols` command which dumps a list of configured scanners and their
  associated protocols/ports to a channel


-- Noteworthy changes in version 1.0.3 (2015-01-28)
* Fixed bug where HOPM wouldn't try re-connecting to the server in case the
  connection got lost
* Added `irc::notice` configuration option


-- Noteworthy changes in version 1.0.2 (2015-01-12)
* Added `options::negcache_rebuild` configuration option
* Added basic IPv6 support allowing HOPM to bind and connect to IPv6 addresses


-- Noteworthy changes in version 1.0.1 (2015-01-06)
* Fixed build on OS X


-- Noteworthy changes in version 1.0.0 (2015-01-03)
* Minor stabilization and performance improvements


-- Noteworthy changes in version 1.0.0beta2 (2014-12-31)
* Added `irc::readtimeout` configuration option
* Worked towards IPv6 support
* Fixed `reference.conf` from causing syntax errors
* HOPM now uses poll() for I/O event notification instead of select()


-- Noteworthy changes in version 1.0.0beta1 (2014-12-25)
* **NOTE:**  this is the first release of the hybrid open proxy monitor (HOPM)
  fully based off the discontinued blitzed open proxy monitor (BOPM) 3.1.3
* Modernized and cleaned up build system
* Modernized the example configuration file. Removed/updated blacklist entries.
* The configuration parser now does support time and size units
* The configuration parser now does support c++ style comments
* Fixed a memory leak in conjunction with manual scans
* Fixed weird behaviour in the command parser
* Code hardening. Replaced occurences of strcpy/strcat with strlcpy/strlcat, etc.
* Various code cleanups and optimizations
* The `irc::away` configuration option is now optional


--------------------------------------------------------------------------------

BUG REPORTS: If you run this code and encounter problems, you must report
 the bug by EMAIL to bugs@ircd-hybrid.org
 Please include a gdb backtrace and a copy of your setup.h and
 hopm.conf with any report (with passwords and other sensitive
 information masked).

DISCUSSION: There is a mailing list for discussion of hopm issues,
 including betas. To subscribe, use this link:
    https://lists.ircd-hybrid.org/mailman/listinfo/hybrid
 This is the proper place to discuss new features, bugs, etc.

Questions/comments directed to bugs@ircd-hybrid.org

Other files recommended for reading: README, INSTALL

--------------------------------------------------------------------------------
$Id$
1	michael	9913	-- Noteworthy changes in version 1.1.10 (2021-01-30)
2	michael	9869	* Timers have been changed to use monotonic time instead of wall-clock time
3	michael	9904	* Fixed broken build with LibreSSL
4	michael	9869
5
6	michael	9719	-- Noteworthy changes in version 1.1.9 (2020-11-16)
7			* Implemented support for loading a user-provided private key and tls client
8	michael	9724	certificate. The `irc::rsa_private_key_file`and `irc::tls_certificate_file`
9			configuration directives have been added for this.
10			As a side effect this now allows HOPM to use certificate fingerprints for
11			NickServ authentication
12	michael	9726	* The `vhost` configuration directive found in the irc {} and scanner {} blocks
13			has been renamed to `bind`
14	michael	9631
15
16	michael	9509	-- Noteworthy changes in version 1.1.8 (2020-07-05)
17	michael	9659	* Minimum supported OpenSSL version is 1.1.1 now
18			* Experimental TLS support for the irc client part has been implemented. We
19			only do TLSv1.2 and higher
20			* The `irc::tls` and `irc::tls_hostname_verification` configuration directives
21			have been added
22			* A possible out-of-bounds write in the irc parser logic has been fixed
23	michael	9489
24
25	michael	9339	-- Noteworthy changes in version 1.1.7 (2020-04-19)
26	michael	9659	* Fixed github issue #31: hopm attempts to open stderr for logging in
27			non-debug/fork mode which can cause hopm to exit silently
28	michael	9327
29
30	michael	8890	-- Noteworthy changes in version 1.1.6 (2019-04-21)
31	michael	9659	* Fixed issue with ssh banner scans where hopm would test connections only
32			against the `target_string` that's defined last in the scanner{} block
33			* Minimum supported OpenSSL version is 1.0.1f now
34	michael	8742
35
36	michael	8575	-- Noteworthy changes in version 1.1.5 (2018-10-14)
37	michael	9661	* The `:`, and `,` nickname delimiters work again
38	michael	9659	* Fixed a bug where the hopm process couldn't be restarted under certain
39			conditions
40			* The hopm process can now be restarted from the command line via `kill -HUP`
41			* Added `--enable-efence` switch to allow easy linking with the
42			electric fence memory debugger library
43			* Implemented proper support to kill users with vulnerable SSH versions by
44			version announcement. Patch provided by falsovsky (Pedro de Oliveira). See
45			`doc/reference.conf` for more information.
46			* Minimum supported OpenSSL version is 1.0.1d now
47	michael	8235
48
49	michael	8148	-- Noteworthy changes in version 1.1.4 (2017-04-05)
50	michael	9659	* IPv6 blacklist support has been implemented
51			* The `CHECK` command now accepts IPv6 addresses
52	michael	9724	* The negative cache has been rewritten to use latest Net::Patricia C sources
53			and does support IPv6 now
54	michael	8104
55
56	michael	7735	-- Noteworthy changes in version 1.1.3 (2016-09-26)
57	michael	9724	* Allow inclusion of other configuration files in the main `hopm.conf` file.
58			See `doc/reference.conf` for further information on how to use the new
59			`.include` configuration directive.
60	michael	7712
61
62	michael	7564	-- Noteworthy changes in version 1.1.2 (2016-05-15)
63	michael	9724	* Fixed archaic bug which can cause the scanner to either detect nothing or to
64			detect everything and therefore even kill legit clients
65	michael	7562
66
67	michael	7036	-- Noteworthy changes in version 1.1.1 (2016-01-03)
68	michael	9659	* Added `command_queue_size`, `command_interval`, and `command_timeout`,
69			configuration directives to the options {} block. See `doc/reference.conf`
70			for more information.
71			* Various updates to the `reference.conf`; added updated `connregex` directives
72			for ircd-hybrid in conjunction with user mode +F (far connect notices), and
73			UnrealIRCd 4.0.0, which now uses a different format for connect notices
74	michael	7018
75
76	michael	6321	-- Noteworthy changes in version 1.1.0 (2015-08-07)
77	michael	9659	* `options::pidfile` and `options::scanlog` can now be relative pathnames
78			* Due to security reasons the `PROTOCOLS` command has been removed again
79	michael	6280
80
81	michael	6230	-- Noteworthy changes in version 1.1.0beta1 (2015-07-02)
82	michael	9724	* Added HTTPS support for SSL/TLS-enabled HTTP proxies which seem to be used
83			quite a lot on IRC nowadays. LibreSSL or OpenSSL 0.9.8o and above is required
84			for this to work.
85	michael	9659	* Added new `HTTPS` and `HTTPSPOST` protocol configuration directives to the
86	michael	9724	scanner {} block
87	michael	6230
88
89	michael	6221	-- Noteworthy changes in version 1.0.8 (2015-06-25)
90	michael	9661	* Added `options::reconnectinterval` configuration option. See `doc/reference.conf`
91	michael	9659	for more information.
92			* Added `options::dns_timeout` configuration option. See `doc/reference.conf`
93			for more information.
94			* Further modernizations and cleanups to the build system
95			* HOPM now compiles with `-fstack-protector-strong` and `-fstack-protector`,
96			respectively, depending on what the compiler supports
97			* Added `--enable-assert` switch to `./configure`. assert() statements are now
98			disabled by default and can be enabled with `./configure --enable-assert`
99			* Added `--enable-warnings` switch to `./configure`, which enables various
100			compiler warnings if supported by the compiler
101	michael	6085
102
103			-- Noteworthy changes in version 1.0.7 (2015-06-06)
104	michael	9659	* HOPM can now detect Dreamboxes with default root passwords
105	michael	9724	* Fixed bug where the configuration parser would report syntax errors with
106			invalid line numbers when there are multi-line C-style comments in the
107			config file
108	michael	6085
109
110	michael	5994	-- Noteworthy changes in version 1.0.6 (2015-05-27)
111	michael	9659	* HOPM now catches MikroTik HttpProxies
112	michael	5994
113
114			-- Noteworthy changes in version 1.0.5 (2015-05-04)
115	michael	9724	* Fixed bug where HOPM couldn't connect to the server specified in the irc {}
116			block on some OS
117	michael	5994
118
119	michael	5716	-- Noteworthy changes in version 1.0.4 (2015-03-17)
120	michael	9659	* Log timestamp format is ISO8601 now
121	michael	9724	* Added `protocols` command which dumps a list of configured scanners and their
122			associated protocols/ports to a channel
123	michael	5716
124
125	michael	5432	-- Noteworthy changes in version 1.0.3 (2015-01-28)
126	michael	9724	* Fixed bug where HOPM wouldn't try re-connecting to the server in case the
127			connection got lost
128	michael	9661	* Added `irc::notice` configuration option
129	michael	5432
130
131			-- Noteworthy changes in version 1.0.2 (2015-01-12)
132	michael	9659	* Added `options::negcache_rebuild` configuration option
133	michael	9724	* Added basic IPv6 support allowing HOPM to bind and connect to IPv6 addresses
134	michael	5432
135
136	michael	5330	-- Noteworthy changes in version 1.0.1 (2015-01-06)
137	michael	9659	* Fixed build on OS X
138	michael	5330
139
140	michael	5297	-- Noteworthy changes in version 1.0.0 (2015-01-03)
141	michael	9659	* Minor stabilization and performance improvements
142	michael	5297
143
144	michael	5237	-- Noteworthy changes in version 1.0.0beta2 (2014-12-31)
145	michael	9659	* Added `irc::readtimeout` configuration option
146			* Worked towards IPv6 support
147			* Fixed `reference.conf` from causing syntax errors
148			* HOPM now uses poll() for I/O event notification instead of select()
149	michael	5237
150
151	michael	5126	-- Noteworthy changes in version 1.0.0beta1 (2014-12-25)
152	michael	9659	* NOTE: this is the first release of the hybrid open proxy monitor (HOPM)
153			fully based off the discontinued blitzed open proxy monitor (BOPM) 3.1.3
154			* Modernized and cleaned up build system
155			* Modernized the example configuration file. Removed/updated blacklist entries.
156			* The configuration parser now does support time and size units
157			* The configuration parser now does support c++ style comments
158			* Fixed a memory leak in conjunction with manual scans
159			* Fixed weird behaviour in the command parser
160			* Code hardening. Replaced occurences of strcpy/strcat with strlcpy/strlcat, etc.
161			* Various code cleanups and optimizations
162			* The `irc::away` configuration option is now optional
163	michael	5100
164
165			--------------------------------------------------------------------------------
166
167			BUG REPORTS: If you run this code and encounter problems, you must report
168			the bug by EMAIL to bugs@ircd-hybrid.org
169	michael	5996	Please include a gdb backtrace and a copy of your setup.h and
170	michael	5100	hopm.conf with any report (with passwords and other sensitive
171			information masked).
172
173			DISCUSSION: There is a mailing list for discussion of hopm issues,
174			including betas. To subscribe, use this link:
175			https://lists.ircd-hybrid.org/mailman/listinfo/hybrid
176			This is the proper place to discuss new features, bugs, etc.
177
178			Questions/comments directed to bugs@ircd-hybrid.org
179
180			Other files recommended for reading: README, INSTALL
181
182			--------------------------------------------------------------------------------
183	michael	5134	$Id$
svnadmin@ircd-hybrid.org	ViewVC Help
Powered by ViewVC 1.1.28