To create new wiki account, please join us on #znc at Libera.Chat and ask admins to create a wiki account for you. You can say thanks to spambots for this inconvenience.
ChangeLog/git: Difference between revisions
Jump to navigation
Jump to search
DarthGandalf (talk | contribs) |
DarthGandalf (talk | contribs) No edit summary |
||
| Line 5: | Line 5: | ||
--> | --> | ||
<!-- Last update at | <!-- Last update at 29104e81a287f6ae7a89516f82f50dde76e26415 --> | ||
See https://github.com/znc/znc/compare/znc-{{ZNC-Version}}...master for a list of changes since {{ZNC-Version}} stable. | See https://github.com/znc/znc/compare/znc-{{ZNC-Version}}...master for a list of changes since {{ZNC-Version}} stable. | ||
| Line 14: | Line 14: | ||
** [[saslplainauth]] implements PLAIN mechanism; this module is loaded by default for new installations, and it supports checking the password using other modules such as [[imapauth]]. | ** [[saslplainauth]] implements PLAIN mechanism; this module is loaded by default for new installations, and it supports checking the password using other modules such as [[imapauth]]. | ||
** [[certauth]] implements EXTERNAL mechanism. | ** [[certauth]] implements EXTERNAL mechanism. | ||
* Implemented [https://ircv3.net/specs/extensions/chghost chghost] capability. The fallback for clients which don't support it is as usual: QUIT followed by JOIN and MODE. | * Implemented [https://ircv3.net/specs/extensions/chghost chghost] capability. The fallback for clients which don't support it is as usual: QUIT followed by JOIN and MODE. | ||
* <code>znc --makepem</code> now takes the CN from <code>gethostname()</code> and <code>uname()</code> if available. This is still overrideable via <code>HOSTNAME</code> environment variable. | |||
== Fixes == | == Fixes == | ||
| Line 23: | Line 23: | ||
== Modules == | == Modules == | ||
* [[certauth]]: it's no longer required to send a garbage password via <code>PASS</code> command, if the client uses SASL EXTERNAL. | * [[certauth]]: | ||
** it's no longer required to send a garbage password via <code>PASS</code> command, if the client uses SASL EXTERNAL. | |||
** switched fingerprints from SHA-1 to more secure SHA-256. For now it still accepts old configs, and if the correct certificate is present, automatically replaces the stored fingerprint with SHA-256, but the support for SHA-1 will be removed in some future version. | |||
* [[modperl]]: remove usage of given/when. | * [[modperl]]: remove usage of given/when. | ||
* [[sasl]]: if RequireAuth is set, but SASL failed, don't disable the network, simply disconnect, and try later, because such issue is often transient, while IRC services are down. | * [[sasl]]: if RequireAuth is set, but SASL failed, don't disable the network, simply disconnect, and try later, because such issue is often transient, while IRC services are down. | ||
Revision as of 20:21, 16 March 2025
| ← 1.9.1 | ZNC git |
 |
This version is not released yet. Use at your own risk. |
See https://github.com/znc/znc/compare/znc-1.9.1...master for a list of changes since 1.9.1 stable.
New
- Implemented SASL v3.1 and v3.2 for clients. It's possible to optionally pass network name and/or client id in the "authorization ID" field of SASL, with the same syntax as without SASL:
user@client/network. Core gained several new module hooks, the specific mechanisms are implemented in modules:- saslplainauth implements PLAIN mechanism; this module is loaded by default for new installations, and it supports checking the password using other modules such as imapauth.
- certauth implements EXTERNAL mechanism.
- Implemented chghost capability. The fallback for clients which don't support it is as usual: QUIT followed by JOIN and MODE.
znc --makepemnow takes the CN fromgethostname()anduname()if available. This is still overrideable viaHOSTNAMEenvironment variable.
Fixes
- Fixed the translation pipeline again, pulled latest translations from crowdin - the pipeline had broken before 1.9.1, but we didn't notice, leaving translations outdated.
Modules
- certauth:
- it's no longer required to send a garbage password via
PASScommand, if the client uses SASL EXTERNAL. - switched fingerprints from SHA-1 to more secure SHA-256. For now it still accepts old configs, and if the correct certificate is present, automatically replaces the stored fingerprint with SHA-256, but the support for SHA-1 will be removed in some future version.
- it's no longer required to send a garbage password via
- modperl: remove usage of given/when.
- sasl: if RequireAuth is set, but SASL failed, don't disable the network, simply disconnect, and try later, because such issue is often transient, while IRC services are down.
Notes for package maintainers
Internal
- Update integration tests to Qt 6
- Minor performance improvements