give em ciphers

This commit is contained in:
psyc://psyced.org/~lynX 2015-01-28 16:08:08 +01:00
parent 8247e2c804
commit 3d49b5537d
8 changed files with 14 additions and 13 deletions

View File

@ -466,8 +466,6 @@ ________________________________________________________________________
occasional failure reports to all involved senders, then silently occasional failure reports to all involved senders, then silently
drops things that were undeliverable (in the case of packet ids, drops things that were undeliverable (in the case of packet ids,
the broken recipient still has the possibility to recover the next day) the broken recipient still has the possibility to recover the next day)
- Repeatedly unable to reach whatever.example.com in order to deliver a
_message_private to 0. Why does it say "0" here.. ouch.
? what to do when hosts talk faster then we resolve them? ? what to do when hosts talk faster then we resolve them?
see around _error_invalid_host_slow see around _error_invalid_host_slow

View File

@ -5,13 +5,13 @@ _warning_server_shutdown_temporary
|Serverneustart: [_reason] |Serverneustart: [_reason]
_status_circuit_encryption_cipher _status_circuit_encryption_cipher
|Gratuliere! Deine Verbindung ist mit Folgenlosigkeit verschlüsselt. |Gratuliere! Deine Verbindung ist mit forward secrecy verschlüsselt ([_circuit_encryption_cipher]).
_warning_circuit_encryption_cipher _warning_circuit_encryption_cipher
|Deine Verbindung ist leider ohne Folgenlosigkeit verschlüsselt ([_circuit_encryption_cipher]). |Deine Verbindung ist leider ohne forward secrecy verschlüsselt ([_circuit_encryption_cipher]).
_error_circuit_encryption_cipher _error_circuit_encryption_cipher
|Deine Verbindung ist ohne Folgenlosigkeit verschlüsselt ([_circuit_encryption_cipher]). |Deine Verbindung ist ohne forward secrecy verschlüsselt ([_circuit_encryption_cipher]).
_failure_disabled_function_register _failure_disabled_function_register
|Registrierung ist auf diesem Server deaktiviert. |Registrierung ist auf diesem Server deaktiviert.

View File

@ -5,10 +5,10 @@ _status_circuit_encryption_cipher
|Congratulations. Your connection is encrypted with forward secrecy. |Congratulations. Your connection is encrypted with forward secrecy.
_warning_circuit_encryption_cipher _warning_circuit_encryption_cipher
|Your cipher choice does not provide forward secrecy ([_circuit_encryption_cipher]). |Your [_circuit_encryption_cipher] cipher does not provide forward secrecy.
_error_circuit_encryption_cipher _error_circuit_encryption_cipher
|Unfortunately your cipher choice does not provide forward secrecy ([_circuit_encryption_cipher]). |Unfortunately your [_circuit_encryption_cipher] cipher does not provide forward secrecy.
_failure_disabled_function_register _failure_disabled_function_register
|Registration disabled on this server. |Registration disabled on this server.

View File

@ -2,13 +2,13 @@
## tradotto al 30% ... cerca /TODO/ per continuare ## tradotto al 30% ... cerca /TODO/ per continuare
_status_circuit_encryption_cipher _status_circuit_encryption_cipher
|Muy bueno! La tua connessione è crittata senza conseguenze. |Muy bueno! La tua connessione è crittata con forward secrecy.
_warning_circuit_encryption_cipher _warning_circuit_encryption_cipher
|La tua connessione non è crittata senza conseguenze ([_circuit_encryption_cipher]). |La tua connessione non provvede forward secrecy ([_circuit_encryption_cipher]).
_error_circuit_encryption_cipher _error_circuit_encryption_cipher
|Purtroppo la tua connessione non è crittata senza conseguenze ([_circuit_encryption_cipher]). |Purtroppo la tua connessione non provvede forward secrecy ([_circuit_encryption_cipher]).
_failure_disabled_function_register _failure_disabled_function_register
|Registrazione di nuovi utenti disabilitata su questo server. |Registrazione di nuovi utenti disabilitata su questo server.

View File

@ -151,7 +151,7 @@ void pushback(string failmc) {
// name in this case (especially if // name in this case (especially if
// we decide that source shouldn't // we decide that source shouldn't
// be the original target)? // be the original target)?
"Could not establish a circuit to [_host] in order to deliver a [_method_relay] to [_source].", 0, // "Could not establish a circuit to [_host] in order to deliver a [_method_relay] to [_source].",
([ "_method_relay": t[1], ([ "_method_relay": t[1],
"_data_relay" : t[2], "_data_relay" : t[2],
// we used to add the vars to the error message, // we used to add the vars to the error message,

View File

@ -502,6 +502,9 @@ enter(source, mc, data, vars) {
if (!((objectp(source) && if (!((objectp(source) &&
// should use trustworthy level 9 instead? if so.. how? // should use trustworthy level 9 instead? if so.. how?
(query_ip_number(source) == "127.0.0.1" (query_ip_number(source) == "127.0.0.1"
# ifdef SECURE_IP_NUMBER
|| SECURE_IP_NUMBER(query_ip_number(source))
# endif
|| query_ip_number(source) == __HOST_IP_NUMBER__ )) || query_ip_number(source) == __HOST_IP_NUMBER__ ))
# if __EFUN_DEFINED__(tls_query_connection_state) # if __EFUN_DEFINED__(tls_query_connection_state)
// psyc client.. may also one day be a psyc server, in that // psyc client.. may also one day be a psyc server, in that

View File

@ -212,7 +212,7 @@ int logon(int neverfails) {
if (tls_available() && tls_query_connection_state(ME) == 1) { if (tls_available() && tls_query_connection_state(ME) == 1) {
if (t = tls_bad_cipher(ME, "psyc")) { if (t = tls_bad_cipher(ME, "psyc")) {
croak("_error_circuit_encryption_cipher", croak("_error_circuit_encryption_cipher",
"Your cipher choice does not provide forward secrecy.", "Your [_circuit_encryption_cipher] cipher does not provide forward secrecy.",
([ "_circuit_encryption_cipher": t ])); ([ "_circuit_encryption_cipher": t ]));
QUIT QUIT
} }

View File

@ -121,7 +121,7 @@ int logon(int failure) {
P0(("certinfo: %O\n", certinfo)) P0(("certinfo: %O\n", certinfo))
if (t = tls_bad_cipher(ME, "psyc")) { if (t = tls_bad_cipher(ME, "psyc")) {
croak("_error_circuit_encryption_cipher", croak("_error_circuit_encryption_cipher",
"Your cipher choice does not provide forward secrecy.", "Your [_circuit_encryption_cipher] cipher does not provide forward secrecy.",
([ "_circuit_encryption_cipher": t ])); ([ "_circuit_encryption_cipher": t ]));
//destruct(ME); //destruct(ME);
} }