ergo/CHANGELOG.md

Changelog

All notable changes to Oragono will be documented in this file.

This project adheres to Semantic Versioning. For the purposes of versioning, we consider the “public API” to refer to the configuration files, CLI interface and database format.

Unreleased

New release of Oragono!

Config Changes

Security

Added

Changed

Removed

Fixed

[0.6.0] - 2017-01-19

We’ve added a ton of new features in this release! Automated connection throttling, the ability to KLINE, updated casemapping and line-length specifications.

I’ve also started including a new section in the changelog called Config Changes, which should help you find what you need to update across releases.

Config Changes

• enabled key added under the connection-limits section.
• connection-throttling section added under server.
• linelen section added under limits.

Added

• Added ARM build (for Raspberry PIs and similar).
• Added automated connection throttling! See the new connection-throttling section in the config.
• Added KLINE and UNKLINE commands. Complementing DLINE’s per-IP and per-network bans, this lets you ban masks from the server.
• Added LUSERS command (thanks @vegax87).
• Added draft IRCv3 capabilities draft/message-tags-0.2 and draft/message-ids.
• Added proposed IRCv3 capability draft/maxline.

Changed

• Changed casemapping from “rfc7700” to “rfc7613”, to match new draft spec.
• Connection limits can now be freely enabled or disabled. If updating, check the new enabled flag under the connection-limits section of the config.

Fixed

• Fixed an issue where UNDLINE didn’t save across server launches.
• Removed several race conditions which could result in server panics.
• WHOIS: Multiple channels now appear in a single reply (thanks @vegax87).

[0.5.0] - 2016-12-10

This release includes a ton of fixes, as well as the ability to ban IP addresses from your network with the DLINE command!

As well, there are some major fixes with the libraries Oragono depends on, which fix various DoS attacks, crashes and timeouts. In short, this release is more stable and fixes a bunch of issues.

This release also updates the database, so be sure to run the oragono upgradedb command.

Added

• Added ability to ban IP addresses and networks from the server with the DLINE and UNDLINE commands.
• Added alpha REST API (intended primarily for use with a future web interface to manage accounts, DLINEs, etc).

Changed

• Database upgraded to make handling accounts simpler.
• Only give chanop (@) on channel join, not channel founder (~). We’ll do channel founder and all on registered chans only.

Fixed

• Fixed a bunch of bugs around setting nicknames on join.
• Fixed crash when using STATUSMSG-like messaging.
• Fixed crash with gIRC-Go ircmsg library we depend on.
• Fixed not sending MODE changes to all clients in a channel.
• Fixed timeout issue with go-ident library we depend on (which caused hangs on connection).
• Prevented a DoS related to lots of clients connecting at once.
• Removed races around setting and changing NICKs, to be more safe.
• Send channel NOTICEs properly.

[0.4.0] - 2016-11-03

This release packs a more extensive oper privelege framework, bugfixes for capabilities/modes, support for new RP commands and more RPL_ISUPPORT tokens. In general, a bunch of new features and bugfixes to make using Oragono more smooth.

Added

• Added automatic client connection limiting, similar to other IRCds.
• Added operator classes, allowing for more finely-grained permissions for operators.
• Added roleplaying commands, both inside channels and between clients.
• Length of channel mode lists (ban / ban-except / invite-except) is now restricted to the limit in config.
• Support MAXLIST, MAXTARGETS, MODES, TARGMAX in RPL_ISUPPORT.
• Added support for IRCv3 capability chghost.

Changed

• In the config file, “operator” changed to “opers”, and new oper class is required.

Fixed

• Fixed being able to change modes when not an operator.
• Fixed bug where HELP wouldn’t correctly display for operators, and added more help topics.
• Fixed bug where you would always have certain capabilities enabled.
• Fixed display of large MONITOR lists.

[0.3.0] - 2016-10-23

We now support dynamically reloading the config file, along with some new IRCv3 capabilities and some fixes.

The REHASH changes are fairly extensive here, but should now be stable (this also fixes a denial of service possible with the old code).

Security

• Prevent a denial of service where the server would stop accepting connections.

Added

• Added REHASH command.
• Added ability to message channel members with a specific privelege (i.e. support for STATUSMSG).
• Added ability to enable and disable SASL.
• Added support for IRCv3 capabilities cap-notify and echo-message.

Changed

• Server operators no longer have permissions to do everything in channels.

Fixed

• MODE: Fixed issue where channel privelege changes returned incorrectly.

[0.2.0] - 2016-10-16

Improved compatibility, more features.

Now comes with a new proper Unicode-capable casemapping and integrated help!

Added

• Added integrated help (with the /HELP command).
• Added support for IRCv3.2 capability negotiation including CAP values.
• Added support for IRCv3 capabilities account-notify, invite-notify, monitor, sasl, and draft capability message-tags as draft/message-tags.

Changed

• Casemapping changed from custom unicode mapping to preliminary rfc7700 mapping.

Removed

• Removed channel persistence with the +P mode (not too useful as currently implemented, to be replaced later).
• Removed the PROXY command (breaks our TLS user mode, and our integrated support for TLS should be fine).

[0.1.0] - 2016-09-18

Initial release of Oragono!

Security

• PROXY command is now restricted appropriately.
• Nicknames, usernames and channel names that break the protocol are no longer allowed.
• Default channel modes set to restrict new channels more appropriately by default.

Added

• YAML config file format.
• buntdb key-value store for persistent data.
• Native SSL/TLS support (thanks to @edmand).
• Ability to generate testing certificates from the command line.
• Support for looking up usernames with ident on client connection.
• RPL_ISUPPORT numeric as advertised by most other IRCds today.
• Ability to parse complex mode change syntax commonly used these days (i.e. +h-ov dan dan dan).
• User mode for clients connected via TLS (+Z).
• Ability to register and login to accounts (with passphrase or certfp).
• Added support for IRCv3 capabilities account-tag, away-notify, extended-join, sasl, server-time, and userhost-in-names.

Changed

• Channel creator (O) privilege changed to founder/admin/halfops (qah) privileges.
• Private (+p) channel mode changed to secret (+s), to match what’s used by servers today.
• Default channel modes changed to (+nt), matching most other IRCds.
• CLI commands and arguments made more consistent with typical software.
• Usernames set by the USER command now start with "~" (to work with new ident support).
• Renamed ONICK command to SANICK to be more consistent with other IRCds.
• Made maximum nickname and channel name lengths configurable.
• Made maximum WHOWAS entries configurable.

Removed

• Removed gitconfig configuration format [replaced with YAML].
• Removed sqlite database [replaced with buntdb key-value store].
• Removed THEATER command (it broke and I’m not that interested in putting the work in to get it working again with the aim of this project. PRs accepted).

Fixed

• Fixed clients no longer being able to send commands after a single command errored out.
• CAP: Registration is now properly suspended during CAP negotiation.
• CAP: Remove CAP CLEAR (recommended in IRCv3 3.2), and allow capability negotiation after registration.
• MODE: Fixed <modestring> evaluation (we were parsing all ungrabbed parameters as a modestring, when it is actually only the first param).
• MODE: New-style mode change syntax (with both adding and removing modes in a single MODE command) is now parsed properly.
• MOTD: Now store MOTD in-memory rather than on-disk, and don’t limit it to 80 characters per line (not required with today’s servers or clients).
• NICK: Restrict nicknames that break the protocol.
• USER: Restrict usernames that break the protocol.
• PROXY: Restrict to specified hostnames only.
• WHOIS: Include the required <nick> param on RPL_ENDOFWHOIS.
• WHOIS: Hide hidden channels in WHOIS responses.