v1.1.1 - a security update

Oragono 1.1.1 is a bugfix release for flaws in message handling, including one with security implications.

Many thanks to @streaps for reporting issues.

Upgrade notes

This release does not change the database or configuration file format.

Security

• Previous releases of Oragono would incorrectly relay chat messages containing the \r byte. An attacker could use this to spoof protocol messages from the server (depending on the implementation of the victim's client). This has been fixed. (#610)

Fixed

• Fixed incorrect rejection of messages with multiple spaces (#602, thanks @streaps!)

v1.1.0 - Cloaking, Bouncing, and Tor

We're pleased to announce Oragono version 1.1.0. This version has a number of exciting improvements, including:

• Simplified commands for registering new accounts with NickServ.
• Support for IP cloaking.
• Support for attaching multiple clients to the same nickname.
• Support for the newly ratified message tags and message ID IRCv3 specifications; client developers are invited to use Oragono as a reference when implementing these specifications.
• Support for running Oragono as a Tor hidden service.

Many thanks to @Ascrod, @amyspark, @bogdomania, @csmith, @jesopo, @jwheare, lover, and @transitracer for reporting issues and contributing patches, and also to @bogdomania, Elvedin Hušić, Nuve, and @streaps for contributing translations.

Upgrade notes

This release includes a database change. If you have datastore.autoupgrade set to true in your configuration, it will be automatically applied when you restart Oragono. Otherwise, you can update the database manually by running oragono upgradedb (see the manual for complete instructions).

No changes to your configuration file should be required for this upgrade. However, updating the file is necessary to enable some new functionality, as described below.

Config changes

• tor-listeners section added for configuring listeners for use with Tor.
• compatibility section added for toggling compatibility behaviors for legacy clients.
• ip-cloaking section added for configuring cloaking.
• bouncer section added for configuring bouncer-like features (in particular, whether multiple clients can use the same nickname).
• check-ident now has recommended value false.
• nick-reservation.method now has recommended value "strict"`.
• fakelag.enabled now has recommended value true.
• limits.linelen.tags removed due to ratification of the message-tags spec, which fixes the maximum tags length at 8191 bytes.
• limits.registration-messages added to restrict how many messages a user can send to the server during connection registration (while connecting to the server).
• channels.operator-only-creation added to optionally restrict creation of new channels to ircops (#537).

Security

• Users can no longer impersonate network services like ChanServ by using confusing nicks like "ChɑnServ" (#519, thanks @csmith!).
• Closed several loopholes in confusable nick detection (#562, #564, #570, thanks lover!)
• Secret channels (mode +s) now act more secret (#380, thanks @csmith!).
• The +R (registered-only) mode now prevents unregistered users from joining the channel, not just from speaking (#463, thanks @bogdomania!).
• Limited how many messages clients can send during connection registration to mitigate potential DoS attacks (#505).
• Attempting to reauthenticate with SASL now fails with 907 ERR_SASLALREADY (#476).

Fixed

• Fixed /ISON command reporting users as always being online (#479).
• Fixed clients who negotiated CAP version 302 or higher not receiving cap-notify messages (#464).
• We now treat channel privileges such as halfop more consistently (#400).
• Fixed a bug where clients could receive message tags they hadn't enabled (#434).
• When replaying history, messages now have more consistent IDs and timestamps
• IDs and timestamps are now applied more consistently to messages (#388, #477, #483).
• Client-to-client tags are now stored and replayed in message history (#437).
• Fixed various error numerics that were being sent with incorrect parameters (#425, thanks @Ascrod!).
• Fixed STATUSMSG not adding the correct prefix to the channel when relaying the message (#467).
• Fixed /RENAME command not correctly renaming the channel for some users (#300, thanks @jesopo!).
• History playback is now batched when applicable (#456, thanks @transitracer!).
• Notices from NickServ/ChanServ/etc should display better in some clients (#496, thanks @jwheare!).
• Fixed nickname timer warnings not displaying correctly sometimes (#449, thanks @bogdomania!).
• When history playback is disabled, the /HISTORY command now says so instead of silently failing (#429, thanks @bogdomania!).
• The /HOSTSERV ON/OFF commands now tell you when you don't have a vhost (#404, thanks @bogdomania!).
• When operators use the /SANICK command, the snomask now says which operator did it instead of saying the target changed their nickname themselves (#360, thanks @bogdomania!).
• History playback now includes messages that the user sent themselves (especially useful with the new bouncer-like capabilities) (#487).

Added

• IP cloaking is now supported (see the manual for details) (#108).
• Users can now attach multiple clients to the same nickname (see the manual for details) (#403).
• Oragono can now be used as a Tor hidden service (see the manual for details) (#369).
• The znc.in/playback capability is now supported, which can automate history playback for clients that support it (#486).
• User preference system controlling various behaviors (/msg NickServ help set for details) (#466).
• Support for the draft/event-playback spec (#457).
• The TAGMSG and NICK messages are now replayable in history (#457).
• Added the draft IRCv3 SETNAME command for changing your realname (#372).
• Added new Bosnian (bs-BA) translation (thanks to Elvedin Hušić!).
• Added new German (de-DE) translation (thanks to streaps!).

Changed

• Registering an account with NickServ is now /msg NickServ register <password>, which registers the current nickname as an account, matching other services (#410).
• Added a compatibility hack to make SASL work with ZNC 1.6.x (#261).
• We now support the ratified message-tags spec, replacing draft/message-tags-0.2.
• We now support the ratified message IDs spec, replacing draft/msgid.
• The oragono.io/maxline-2 capability has replaced oragono.io/maxline, the new version now working alongside the ratified message-tags spec (#433).
• We now support draft/resume-0.5 and the associated BRB command, replacing draft/resume-0.3.
• Upgraded support for the /RENAME command to the latest draft of the specification.
• Upgraded support for the /ACC command to the latest draft of the specification (#453, #455).
• Removed the +a away mode as no other servers use it (#468, thanks @jesopo and @jwheare!).
• Forcing trailing parameters for legacy compatibility can now be disabled in config (#479).
• autoreplay-on-join no longer replays JOIN and PART lines by default (#474, thanks @amyspark!).
• snomasks are no longer sent for unregistered clients (#362, thanks @bogdomania!).
• WHOIS responses no longer include the 690 RPL_WHOISLANGUAGE numeric, as it doesn't show anything useful to other users (#516).
• ISON now reports services (ChanServ/NickServ/etc) as online (#488).
• All times are now reported in UTC (#480).
• NICKSERV ENFORCE is deprecated in favor of the new NICKSERV SET ENFORCE (the old syntax is still available as an alias).
• The WHO command is now treated like PONG in that it doesn't count as user activity, since client software often uses it automatically (#485).
• The NAMES command now only returns results for the first given channel (#534).
• Updated French (fr-FR) translation (thanks to Nuve!).
• Updated Română (ro-RO) translation (thanks to @bogdomania!).

Internal Notes

• Building Oragono is now easier (#409).
• Official builds now use Go 1.12 (#406).
• Our message building and parsing code is slightly faster now (#387).
• Added the oragono.io/nope capability to encourage clients to request capabilities safely (#511).
• Made some previously untranslatable strings translatable (#407).
• Fixed portability issues with 32-bit architectures (#527).

v1.1.0-rc1 - almost ready!

We're pleased to be publishing the release candidate for 1.1.0 (the official release should follow in a week or two, with more complete credits). This version has a number of exciting improvements, including:

• Simplified commands for registering new accounts with NickServ.
• Support for IP cloaking.
• Support for attaching multiple clients to the same nickname.
• Support for the newly ratified message tags and message ID IRCv3 specifications; client developers are invited to use Oragono as a reference when implementing these specifications.
• Support for running Oragono as a Tor hidden service.

This release includes a database change. If you have datastore.autoupgrade set to true in your configuration, it will be automatically applied when you restart Oragono; otherwise, you can update the database manually by running oragono upgradedb.

Config changes

• tor-listeners section added for configuring listeners for use with Tor.
• compatibility section added for toggling compatibility behaviors for legacy clients.
• ip-cloaking section added for configuring cloaking.
• bouncer section added for configuring bouncer-like features (in particular, whether multiple clients can use the same nickname).
• check-ident now defaults to false.
• nick-reservation.method now defaults to "strict".
• fakelag.enabled now defaults to true
• limits.linelen.tags removed due to ratification of the message-tags spec, which fixes the maximum tags length at 8191 bytes.
• limits.registration-messages added to restrict how many messages a user can send to the server during connection registration (while connecting to the server).
• channels.operator-only-creation added to optionally restrict creation of new channels to ircops (#537).

Security

• Users can no longer impersonate network services like ChanServ by using confusing nicks like "ChɑnServ" (#519, thanks @csmith!).
• Secret channels (mode +s) now act more secret (#380, thanks @csmith!).
• The +R (registered-only) mode now prevents unregistered users from joining the channel, not just from speaking (#463, thanks @bogdomania!).
• Limited how many messages clients can send during connection registration to mitigate potential DoS attacks (#505).
• Attempting to reauthenticate with SASL now fails with 907 ERR_SASLALREADY (#476).

Fixed

• Fixed /ISON command reporting users as always being online (#479).
• Fixed clients who negotiated CAP version 302 or higher not receiving cap-notify messages (#464).
• We now treat channel privileges such as halfop more consistently (#400).
• Fixed a bug where clients could receive message tags they hadn't enabled (#434).
• When replaying history, messages now have more consistent IDs and timestamps
• IDs and timestamps are now applied more consistently to messages (#388, #477, #483).
• Client-to-client tags are now stored and replayed in message history (#437).
• Fixed various error numerics that were being sent with incorrect parameters (#425, thanks @Ascrod!).
• Fixed STATUSMSG not adding the correct prefix to the channel when relaying the message (#467).
• Fixed /RENAME command not correctly renaming the channel for some users (#300, thanks @jesopo!).
• History playback is now batched when applicable (#456, thanks @transitracer!).
• Notices from NickServ/ChanServ/etc should display better in some clients (#496, thanks @jwheare!).
• Fixed nickname timer warnings not displaying correctly sometimes (#449, thanks @bogdomania!).
• When history playback is disabled, the /HISTORY command now says so instead of silently failing (#429, thanks @bogdomania!).
• The /HOSTSERV ON/OFF commands now tell you when you don't have a vhost (#404, thanks @bogdomania!).
• When operators use the /SANICK command, the snomask now says which operator did it instead of saying the target changed their nickname themselves (#360, thanks @bogdomania!).
• History playback now includes messages that the user sent themselves (especially useful with the new bouncer-like capabilities) (#487).

Added

• IP cloaking is now supported (see the manual for details) (#108).
• Users can now attach multiple clients to the same nickname (see the manual for details) (#403).
• Oragono can now be used as a Tor hidden service (see the manual for details) (#369).
• The znc.in/playback capability is now supported, which can automate history playback for clients that support it (#486).
• User preference system controlling various behaviors (/msg NickServ help set for details) (#466).
• Support for the draft/event-playback spec (#457).
• The TAGMSG and NICK messages are now replayable in history (#457).
• Added the draft IRCv3 SETNAME command for changing your realname (#372).

Changed

• Registering an account with NickServ is now /msg NickServ register <password>, which registers the current nickname as an account, matching other services (#410).
• Added a compatibility hack to make SASL work with ZNC 1.6.x (#261).
• We now support the ratified message-tags spec, replacing draft/message-tags-0.2.
• We now support the ratified message IDs spec, replacing draft/msgid.
• The oragono.io/maxline-2 capability has replaced oragono.io/maxline, the new version now working alongside the ratified message-tags spec (#433).
• We now support draft/resume-0.5 and the associated BRB command, replacing draft/resume-0.3.
• Upgraded support for the /RENAME command to the latest draft of the specification.
• Upgraded support for the /ACC command to the latest draft of the specification (#453, #455).
• Removed the +a away mode as no other servers use it (#468, thanks @jesopo and @jwheare!).
• Forcing trailing parameters for legacy compatibility can now be disabled in config (#479).
• autoreplay-on-join no longer replays JOIN and PART lines by default (#474, thanks @amyspark!).
• snomasks are no longer sent for unregistered clients (#362, thanks @bogdomania!).
• WHOIS responses no longer include the 690 RPL_WHOISLANGUAGE numeric, as it doesn't show anything useful to other users (#516).
• ISON now reports services (ChanServ/NickServ/etc) as online (#488).
• All times are now reported in UTC (#480).
• NICKSERV ENFORCE is deprecated in favor of the new NICKSERV SET ENFORCE (the old syntax is still available as an alias).
• The WHO command is now treated like PONG in that it doesn't count as user activity, since client software often uses it automatically (#485).
• The NAMES command now only returns results for the first given channel (#534).

Internal Notes

• Building Oragono is now easier (#409).
• Official builds now use Go 1.12 (#406).
• Our message building and parsing code is slightly faster now (#387).
• Added the oragono.io/nope capability to encourage clients to request capabilities safely (#511).
• Made some previously untranslatable strings translatable (#407).
• Fixed portability issues with 32-bit architectures (#527).

v1.0.0 - History, Unicode, and Nickname Ownership

We've finally made it to v1.0.0! With this release, our list of need-to-haves is rounded out, and we reckon the software's ready for production use in smaller networks. slingamn and I have been working with our contributors and translators to prepare a cracker of a release. Thanks to @csmith our Docker builds have been updated, with automatic rebuilds as we develop the software. Thanks to @bogdomania our translation workflow has been improved a lot.

Highlights include:

• Optional support for storing and replaying message history with the draft/resume-0.3 capability, the draft IRCv3 CHATHISTORY command, and a custom HISTORY command.
• Better detection of confusing nick/account/channel names.
• User-customizable nickname protection methods.
• An account-only mode in which all clients must have an account and login to it (using SASL) before they can join the server.

Thanks to Mauropek, @modinfo, @bogdomania, @Shillos, Tony Chen, and Remini for adding new translations. Thanks to @Ascrod, @bogdomania, @csmith, @jesopo, @jwheare, @remini1998, @enckse, and @iNecas for finding bugs and/or writing new features.

Config Changes

• allow-custom-enforcement key added under accounts.
• allow-plaintext-resume key added under server.
• history section added.
• identlen key added under limits.
• login-throttling section added under accounts.
• max-channels-per-account key added under channels.registration (limiting the number of channels that can be registered).
• max-channels-per-client key added under channels (limiting the number of channels that can be joined).
• method key now under accounts now allows the value "optional".
• Exemption lists now accept localhost as a value, meaning any loopback IPV4, loopback IPV6, or unix domain address.
• Logging type server has been added, replacing the startup, rehash, and shutdown types.
• The default logging configuration now logs to stderr only, rather than to both stderr and a file.
• We no longer listen on port 6668 by default (this fixes Docker installs).

Security

• Added a SASL-only mode in which all clients must authenticate with SASL.
• Added login throttling as a hardening measure against password guessing.
• Configurable limits are imposed on how many channels clients can join or register.

Added

• Added automagic datastore creation on oragono run.
• Added detection and prevention of confusing nicknames, account names, and channel names.
• Added limited message history for connection resuming (to be extended in future).
• Added new Español (es) translation (thanks to Mauropek!).
• Added new Polski (pl) translation (thanks to @modinfo!).
• Added new Română (ro) translation (thanks to @bogdomania!).
• Added new Ελληνικά (el) translation (thanks to @Shillos!).
• Added new 简体中文 (zh-CN) translation (thanks to Tony Chen and Remini!)).
• Added proposed IRCv3 capability draft/setname.
• Added subcommands to NICKSERV, including:
  • PASSWD to change account passwords.
  • ENFORCE to set a specific enforcement mechanism on your nick.
  • SAREGISTER to allow operators to manually create new user accounts.

Changed

• SASL PLAIN logins now log more correctly.
• Database upgrade failures now provide information about the error that occurred.
• Halfops can now kick unprivileged users.
• Idents (sometimes called "usernames") are now restricted to ASCII, similar to other servers.
• Improved compatibility with ZNC's nickserv module.
• In addition to the founder, now auto-ops (halfop and higher) automatically bypass channel join restrictions.
• Log lines now display time down to milliseconds, instead of just seconds.
• Updated all translation files (thanks to our amazing translators!).
• Updated proposed IRCv3 capability draft/resume to draft/resume-0.3.
• When nick ownership is enabled, users can now select which enforcement mechanism to use with their nickname.

Fixed

• INVITE: Fixed bug where invited users could not join the channel they were invited to (thanks to @unendingpattern!).
• oragono.io/maxline capability was accidentally disabled, and is now re-enabled.
• oragono genpasswd now works when piping input in (fixes Docker installs).
• PRIVMSG: Messages sent to multiple clients (such as channel messages) now share the same timestamp (previously each client got a very slightly different time).
• WHOIS: Now responds properly for NickServ, ChanServ, etc.
• Channel names with right-to-left characters are now casefolded correctly (thanks to @remini1998!).
• Fixed handling of CIDR width in connection limiting/throttling.
• Fixed incorrect behavior of CHANSERV OP command.
• Fixed incorrect rejection of nickmasks with Unicode RTL nicknames.
• Fixed many responses that violated the specifications (thanks to @Ascrod, @bogdomania, @csmith, @jesopo, and @jwheare!).
• Fixed nickname sync issue which could cause clients to fail to see each other.
• Invalid ISUPPORT tokens are now explicitly rejected.
• Made server-time timestamp format more consistent and safer.
• Oragono now exits with status (1) if it fails to start.
• Prevent logging in multiple times when using /NS IDENTIFY.
• Prevented the db handler from automagically creating the database without initializing it (thanks @enckse!). We also now automatically create the datastore on run.

Internal Notes

• DLINE and KLINE refactored, and expired bans are now removed from the database.
• Command-line parsing was upgraded to match modern best practices (thanks to @iNecas!).
• Direct responses to client commands are now sent "synchronously", bypassing the sendq.
• Logging system optimised.
• Services handlers refactored.
• Translations are now sent to/PR'd from CrowdIn automagically as we develop the software.

v1.0.0-rc1 - Almost ready!

Our v1.0.0 is finally here! Well, almost. The final v1.0.0 should be released in a week or two, after our last bits of testing is complete and the documentation has been double and triple-checked. This version rounds out most of our need-to-haves, and leaves us with a bunch of nice-to-haves that we'll be looking at going forward. Thanks to all of our amazing translators and contributors for the work they've done this release (we'll have a proper thanks section when v1.0.0 drops).

Highlights include:

• Support for storing and replaying message history with: the draft/resume-0.3 capability, the CHATHISTORY command, and a custom HISTORY command.
• Better detection of confusing nick/account/channel names.
• User-customizable nickname protection methods.
• An account-only mode in which all clients must have an account and login to it (using SASL) before they can join the server.

Config Changes

• allow-custom-enforcement key added under accounts.
• allow-plaintext-resume key added under server.
• history section added.
• identlen key added under limits.
• login-throttling section added under accounts.
• method key now under accounts now allows the value "optional".
• Logging type server has been added, replacing the startup, rehash, and shutdown types.
• We no longer listen on port 6668 by default (this fixes Docker installs).
• The default logging configuration now logs to stderr only, rather than to both stderr and a file.
• max-channels-per-client key added under channels (limiting the number of channels that can be joined).
• max-channels-per-account key added under channels.registration (limiting the number of channels that can be registered).
• Exemption lists now accept localhost as a value, meaning any loopback IPV4, loopback IPV6, or unix domain address.

Security

• Added a SASL-only mode in which all clients must authenticate with SASL.
• Added login throttling as a hardening measure against password guessing.
• Configurable limits are imposed on how many channels clients can join or register.

Added

• Added automagic datastore creation on oragono run.
• Added limited message history for connection resuming (to be extended in future).
• Added new Español (es) translation (thanks to Mauropek!)).
• Added new Polski (pl) translation (thanks to Sebastian Korotkiewicz (modinfi)!)).
• Added new Română (ro) translation (thanks to Bogdan Mințoi!)).
• Added new Ελληνικά (el) translation (thanks to Nicholas Kyriakides (Shillos)!)).
• Added new 简体中文 (zh-CN) translation (thanks to Tony Chen and Remini!)).
• Added new subcommands to NICKSERV, including:
  • PASSWD to change account passwords.
  • ENFORCE to set a specific enforcement mechanism on your nick.
  • SAREGISTER to allow operators to manually create new user accounts.
• Added Unicode confusable detection and prevention when changing nicknames and registering accounts.
• Added proposed IRCv3 capability draft/setname.

Changed

• SASL PLAIN logins now log more correctly.
• Database upgrade failures now provide information about the error that occurred.
• Idents (sometimes called "usernames") are now restricted to ASCII, similar to other servers.
• In addition to the founder, now auto-ops (halfop and higher) automatically bypass channel join restrictions.
• Log lines now display time down to milliseconds, instead of just seconds.
• Updated all translation files (thanks to our amazing translators!).
• Updated proposed IRCv3 capability to version draft/resume-0.3.
• When nick ownership is enabled, users can now select which enforcement mechanism to use with their nickname.
• Improved compatibility with ZNC's nickserv module.
• Halfops can now kick unprivileged users.

Removed

Fixed

• oragono.io/maxline capability was accidentally disabled, now re-enabled.
• INVITE: Fixed bug where invited users could not join the channel they were invited to.
• PRIVMSG: Messages sent to multiple clients (such as channel messages) now share the same timestamp (previously each client got a very slightly different time).
• WHOIS: Now responds properly for NickServ, ChanServ, etc.
• Channel names with right-to-left characters are now casefolded correctly.
• Fixed incorrect rejection of nickmasks with Unicode RTL nicknames.
• Fixed nickname sync issue which could cause clients to fail to see each other.
• Invalid ISUPPORT tokens are now explicitly rejected.
• Made server-time timestamp format more consistent and safer.
• Oragono now exits with status (1) if it fails to start.
• Prevent logging in multiple times when using /NS IDENTIFY.
• Prevented the db handler from automagically creating the database without initializing it (thanks @enckse!). We also now automatically create the datastore on run.
• Updated internal command line parsing (thanks @iNecas!).
• oragono genpasswd now works when piping input in (fixes Docker installs).
• Fixed handling of CIDR width in connection limiting/throttling.
• Fixed many responses that violated the specifications (thanks to Ascrod, bogdomania, csmith, jesopo, jwheare).
• Fixed incorrect behavior of CHANSERV OP command.

Internal Notes

• DLINE and KLINE refactored, and expired bans are now removed from the database.
• Logging system optimised.
• Services handlers refactored.
• Translations are now sent to/PR'd from CrowdIn automagically as we develop the software.
• Direct responses to client commands are now sent "synchronously", bypassing the sendq.

v0.12.0 - The Spookiest IRCd

There's been a host of changes in the past six months, and this Halloween release has a number of very useful improvements.

For example, passwords are now hashed in a much better way than we did it before (jlatt's original method back from Ergonomadic was the right way to do things), the database now auto-upgrades for you when it detects a new version, thanks to Slingamn we now have vhosts, and there's been a ton of rewrites under-the-hood to improve stability and performance.

If you have any trouble with this release, please let us know with an issue on our tracker, or by talking to us in #oragono on Freenode.

Thanks to slingamn for a lot of heavy lifting this release and to vilmibm for contributing a documentation fix!

Config Changes

• allow-multiple-per-connection key removed from accounts.
• autoupgrade key added under datastore, specifying whether to upgrade to new database versions automatically.
• bcrypt-cost key added under accounts, to control how strongly account passwords are hashed.
• stackimpact section removed from debug.
• unix-bind-mode key added under server, controlling the bind mode used for unix listening sockets.
• vhosts section added under accounts, configuring our new vhost support.
• new oper capabilities accreg, sajoin, vhosts and chanreg added.

Security

• Password hashing has been improved (with current passwords being automatically upgraded to use the new method).
• Various crashes have been resolved.

Added

• Added database auto-upgrades.
• Added new subcommands to ChanServ including:
  • AMODE to allow setting persistent channel modes for users.
  • DROP to unregister a channel.
• Added vhosts (virtual/vanity hosts), controlled via HostServ.

Changed

• ChanServ and NickServ now show in their help output when commands have been disabled.
• Channel keys and modes are now stored for registered channels.
• Client capability handling rewritten under-the-hood.
• Disabled services commands now show as disabled (rather than being completely hidden).
• Many under-the-hood optimisations (thanks @slingamn!).
• Rehashing is now more consistent and safe.

Removed

• Removed StackImpact debug support, as we don't find it useful these days.

Fixed

• Fixed LUSERS to make it display correct client count and output correct params (thanks @moortens!.
• Fixed PROXY support for IPv6 clients.
• Fixed SAMODE crash when using it on a channel you're not joined to.
• Fixed WHOIS so that RPL_WHOISACCOUNT is now sent correctly.
• Fixed fakelag timing to better match expected values.
• Fixed issue where incoming and outgoing private messages were being incorrectly modified (a space was being added to the end) due to a bug with our protocol handling.
• Fixed password hashing method, with existing passwords being auto-upgraded to use the new method.

Lotsa Changes

And v0.11.0 finally comes along! This release has been in the works for almost four months now, with an alpha and beta helping square away the issues.

We're adding a lot of features to improve debugging, better support international users, and make things better for network administrators. Among the new features, you can use the LANGUAGE command to set a custom server language (see our CrowdIn to contribute), expose a debugging pprof endpoint, reserve nicknames with NickServ, and force email verification for new user accounts. On the improvements side we have a CAP REQ fix, and we now have a manual that contains a nice overview of Oragono's documentation.

If you have any trouble with this release, please let us know with an issue on our tracker, or by talking to us in #oragono on Freenode.

Thanks a bunch to everyone for the help with this release – especially to our translators and to Slingamn for being an awesome co-maintainer!

Config Changes

• callbacks section added under accounts/registration, configuring our new email verification (disabled by default).
• fakelag section added, configuring our new fakelag implementation.
• ips-per-subnet key renamed to connections-per-subnet.
• motd-formatting is now enabled by default.
• nick-reservation section added under accounts, configuring our new nickname ownership abilities.
• nofakelag and unregister oper classes added.
• pprof-listener key added under debug (disabled by default).
• skip-server-password key added under accounts, to better support certain clients.
• verify-timeout default value changed from 120 hours to 32 hours under accounts/registration.

Added

• Added 32-bit builds.
• Added a debug pprof endpoint, which is disabled by default and can be exposed in the config.
• Added a manual to our documentation! This is primarily where we'll be adding user-facing information and instructions from now on.
• Added current running git commit to the sent version string.
• Added fakelag, so that the server can slow down clients hitting it too aggressively. Disabled by default while we work out the kinks and the specific settings (thanks @slingamn!).
• Added IRCv3 capability batch and draft capability draft/labeled-response.
• Added listening support for unix sockets.
• Added new Brazilian Portuguese translation (thanks to Alexandre Oliveira!)).
• Added new French translation (thanks to Joshua!).
• Added new Norwegian translation (thanks to Morten!).
• Added new subcommands to CHANSERV, including:
  • OP to op yourself or the given user (can only be run by channel founders).
• Added new subcommands to NICKSERV, including:
  • DROP to de-associate a nickname from your current account.
  • GHOST to remove the given client (if they're logged in with your user account).
  • GROUP to associate a nickname with your current account.
  • IDENTIFY to login to an account.
  • INFO to see information about the given (or your own) account.
  • REGISTER to register an account.
  • UNREGISTER to delete your account.
• Added new Turkish translation (thanks to Yaser!).
• Added proposed IRCv3 capabilities draft/languages and draft/resume.
• Added the ability to associate multiple nicknames with your account, and enforce nickname ownership.
• Added the ability to force email verification when users register accounts.
• Added user modes, including:
  • B: Mark yourself as a bot, and display that you're a bot in WHOIS.

Changed

• genpasswd now requires that you confirm the input passphrase.
• Message IDs are now much shorter and easier to read – down from 39 characters to 16 while preserving a very similar gaurantee of uniqueness (thanks @prawnsalad for bringing up this issue).

Fixed

• We now correctly suspend registration when receiving a CAP REQ, as per the spec.
• We now properly cut off clients who try to send us too much data at once.

v0.11.0-beta release

This is a beta preview of the v0.11.0 release, which is actually likely to come this weekend. There's a whole lot of useful, important changes in this release including better debugging features, languages, nick reservation, email verification for new accounts, and a CAP REQ fix! However, it could be pretty unstable on a count of being a beta and simply the number of changes packed into it.

If you have any trouble with this release, please let us know with an issue on our tracker, or by talking to us in #oragono on Freenode.

Thanks a bunch for all the help with this release – especially to our translators and to Slingamn for being an awesome co-maintainer!

Config Changes

• callbacks section added under accounts/registration, configuring our new email verification (disabled by default).
• fakelag section added, configuring our new fakelag implementation.
• ips-per-subnet key renamed to connections-per-subnet.
• motd-formatting is now enabled by default.
• nick-reservation section added under accounts, configuring our new nickname ownership abilities.
• nofakelag and unregister oper classes added.
• pprof-listener key added under debug (disabled by default).
• skip-server-password key added under accounts, to better support certain clients.
• verify-timeout default value changed from 120 hours to 32 hours under accounts/registration.

Added

• Added a debug pprof endpoint, which is disabled by default and can be exposed in the config.
• Added a manual to our documentation! This is primarily where we'll be adding user-facing information and instructions from now on.
• Added current running git commit to the sent version string.
• Added fakelag, so that the server can slow down clients hitting it too aggressively. Disabled by default while we work out the kinks and the specific settings (thanks @slingamn!).
• Added IRCv3 capability batch and draft capability draft/labeled-response.
• Added listening support for unix sockets.
• Added new Brazilian Portuguese translation (thanks to Alexandre Oliveira!)).
• Added new French translation (thanks to Joshua!).
• Added new Norwegian translation (thanks to Morten!).
• Added new subcommands to CHANSERV, including:
  • OP to op yourself or the given user (can only be run by channel founders).
• Added new subcommands to NICKSERV, including:
  • DROP to de-associate a nickname from your current account.
  • GHOST to remove the given client (if they're logged in with your user account).
  • GROUP to associate a nickname with your current account.
  • IDENTIFY to login to an account.
  • INFO to see information about the given (or your own) account.
  • REGISTER to register an account.
  • UNREGISTER to delete your account.
• Added new Turkish translation (thanks to Yaser!).
• Added proposed IRCv3 capabilities draft/languages and draft/resume.
• Added the ability to associate multiple nicknames with your account, and enforce nickname ownership.
• Added the ability to force email verification when users register accounts.
• Added user modes, including:
  • B: Mark yourself as a bot, and display that you're a bot in WHOIS.

Changed

• genpasswd now requires that you confirm the input passphrase.
• Message IDs are now much shorter and easier to read – down from 39 characters to 16 while preserving a very similar gaurantee of uniqueness (thanks @prawnsalad for bringing up this issue).

Fixed

• We now correctly suspend registration when receiving a CAP REQ, as per the spec.
• We now properly cut off clients who try to send us too much data at once.

v0.11.0-alpha release

This is an alpha preview of the v0.11.0 release, which is likely to come next weekend.

We've introduced a lot and fixed a pretty serious bug around CAP! To be specific, we've included translation support, along with a fairly fully-fleshed-out Turkish translation and some extra proposed spec support.

To enable translations, just change enabled to true, in the languages section (and make sure the path is correct). After this, connect and send LANGUAGE tr_TR as noted in the related spec, and you'll be using Turkish!

Added

• Added new Turkish translation (thanks to Yaser!).
• Added proposed IRCv3 capability draft/languages.
• Added proposed IRCv3 capability draft/resume.
• Added user modes, including:
  • B: Mark yourself as a bot, and display that you're a bot in WHOIS.

Changed

• Message IDs are now much shorter and easier to read – down from 39 characters to 16 while preserving a very similar gaurantee of uniqueness (thanks @prawnsalad for bringing up this issue).

Fixed

• We now correctly suspend registration when receiving a CAP REQ, as per the spec.

Christmas Bugfixes and Updates!

This patch fixes a couple bugs, updates cap/isupport token names in response to spec changes, and allows unprivileged users to list channel bans. Ah, DLINE and KLINE also store oper names, so you can see who set those pesky bans later on!

Overall, a fairly standard patch that just improves things. No config changes, no database changes.

Also, Merry Christmas and Happy Holidays!

Added

• DLINE/KLINE: We now save the name of whichever oper set the ban (and display it later).

Changed

• draft/maxline capability is now oragono.io/maxline.
• WHO: First parameter now must be a mask or channel name, cannot be ommitted.
• Casemapping is now advertised using the UTF8MAPPING token, matching the new spec changes.
• We now allow unprivileged users to list channel bans.

Fixed

• Fixed a bug around removing channel bans.
• Fixed a client timeout bug.