Roxen.git / server / base_server / global_variables.pike

version» Context lines:

Roxen.git/server/base_server/global_variables.pike:161:    "so depending on your network configuration you may need "    "to disable them. "));       defvar( "require_starttls",    Variable.IntChoice    (0, ([    -1: "Disabled",    0: "Optional",    1: "Required",    ]), 0, -  LOCALE(0, "AUTH TLS"), -  LOCALE(0, "Whether to require the AUTH TLS command (RFC4217) " +  LOCALE(1078, "AUTH TLS"), +  LOCALE(1079, "Whether to require the AUTH TLS command (RFC4217) "    "before login.")));   }         void set_up_http_variables( Protocol o )   {    function(DEFVAR) defvar = o->defvar;       function do_set_cookie(Protocol o)    {
Roxen.git/server/base_server/global_variables.pike:256: Inside #if constant(SSL.Constants.CIPHER_aead)
   // Pike 8.0 or recent Pike 7.8.    // They have SSL.[Cc]ontext()->get_suites().       // 112 bits is the minimum strength to still retain the    // DES-3 suites, which are required in the TLS standards.    //    // FIXME: The cipher strength list ought to be generated dynamically    // from SSL.Constants.CIPHER_effective_keylengths.    defvar("ssl_key_bits",    Variable.Int(112, 0, -  LOCALE(0, "Cipher suite minimum effective key strength"), -  LOCALE(0, +  LOCALE(1080, "Cipher suite minimum effective key strength"), +  LOCALE(1081,    "<p>The minimum number of effective bits to "    "secure connections.</p>\n"    "<p>Common ciphers (subject to availability) "    "in order of effective key bits as of "    "December 2015:\n"    "<dl>\n"    "<dt>24</dt>\n"    "<dd>Export RC4 (aka RC4-40)</dd>\n"    "<dt>32</dt>\n"    "<dd>Export DES (aka DES-40)</dd>\n"
Roxen.git/server/base_server/global_variables.pike:295: Inside #if constant(SSL.Constants.CIPHER_aead)
   "<p>Cipher strengths lower than 112 bits are "    "<b>NOT</b> recommended, and there are RFCs that "    "prohibit the use of all those suites.</p>\n")))->    set_range(0, Variable.no_limit);   #endif      #if constant(SSL.ServerConnection)    // Pike 8.0 and later has much more advanced support for SSL/TLS.       defvar( "ssl_password", -  Variable.String("", 0, LOCALE(0, "SSL decryption password"), -  LOCALE(0, "Optional password to decrypt the " +  Variable.String("", 0, LOCALE(1082, "SSL decryption password"), +  LOCALE(1083, "Optional password to decrypt the "    "SSL key file(s).")));       defvar("ssl_suite_filter",    Variable.IntChoice(0,    ([    0: "Default",    4: "Ephemeral key exchanges only",    8: "Suite B (relaxed)",    12: "Suite B (ephemeral only)",    14: "Suite B (transitional)",    15: "Suite B (strict)",    ]),    0, -  LOCALE(0, "Additional suite filtering"), -  LOCALE(0, "<p>Selects an additional cipher suite " +  LOCALE(1084, "Additional suite filtering"), +  LOCALE(1085, "<p>Selects an additional cipher suite "    "policy.</p>"    "<p>The supported filter modes are:\n"    "<dl>\n"    "<dt>Default</dt>\n"    "<dd>Use the default cipher suite selection "    "policy, and allow all cipher suites that "    "have sufficient strength.</dd>\n"    "<dt>Ephemeral key exchanges only</dt>\n"    "<dd>Only allow cipher suites that use a "    "key exchange with ephemeral keys (aka "
Roxen.git/server/base_server/global_variables.pike:359: Inside #if constant(SSL.Constants.PROTOCOL_TLS_MAX) and #if constant(SSL.Constants.PROTOCOL_TLS_1_1)
   ]);   #if constant(SSL.Constants.PROTOCOL_TLS_1_1)    // NB: The symbol may be available, but the Pike binary might be to old...    for (SSL.Constants.ProtocolVersion v = SSL.Constants.PROTOCOL_TLS_1_1;    v <= SSL.Constants.PROTOCOL_TLS_MAX; v++) {    ssl_versions[v] = sprintf("TLS 1.%d", v - SSL.Constants.PROTOCOL_TLS_1_0);    }   #endif    defvar("ssl_min_version",    Variable.IntChoice(SSL.Constants.PROTOCOL_TLS_1_0, ssl_versions, 0, -  LOCALE(0, "Minimum supported version of SSL/TLS"), -  LOCALE(0, "<p>Reject clients that want to use a " +  LOCALE(1086, "Minimum supported version of SSL/TLS"), +  LOCALE(1087, "<p>Reject clients that want to use a "    "version of SSL/TLS lower than the selected "    "version.</p>\n"    "<p>Note: SSL 3.0 has been deprecated "    "in RFC 7568.</p>\n")));   #endif /* SSL.Constants.PROTOCOL_TLS_MAX */   }         // Get the current domain. This is not as easy as one could think.   string get_domain(int|void l)
Roxen.git/server/base_server/global_variables.pike:887: Inside #if undefined(__NT__)
   LOCALE(157, "If the server is unable to accept connection for this many "    "minutes, it will be restarted. You need to find a balance: "    "if set too low, the server will be restarted even if it's doing "    "legal things (like generating many images), if set too high you might "    "get a long downtime if the server for some reason locks up."),    ({1,2,3,4,5,10,15,30,60}),    lambda() {return !query("abs_engage");});   #endif // __NT__       defvar("auto_fetch_rxps", 0, -  LOCALE(0, "Auto Maintenance: Enable Automatic Patch import"), +  LOCALE(1088, "Auto Maintenance: Enable Automatic Patch import"),    TYPE_FLAG, -  LOCALE(0, "Automatically fetch and import patches to the server " +  LOCALE(1089, "Automatically fetch and import patches to the server "    "from"));       defvar("locale",    Variable.Language("Standard", ({ "Standard" }) +    Locale.list_languages("roxen_config"),    0, LOCALE(158, "Default language"),    LOCALE(159, "Locale, used to localize all "    "messages in Roxen. Standard means using "    "the default locale, which varies "    "according to the values of "
Roxen.git/server/base_server/global_variables.pike:948:    Variable.Schedule( ({ 2, 1, 1, 0, 4 }), 0,    LOCALE(387,"Auto Maintenance: Restart Schedule"),    LOCALE(388, "Automatically restart the "    "server according to this schedule.") ) )    ->set_invisibility_check_callback (    lambda(RequestID id, Variable.Variable f)    {return !query("suicide_engage");}    );       defvar("patch_on_restart", 0, -  LOCALE(0, "Auto Maintenance: Restart and apply patches"), +  LOCALE(1090, "Auto Maintenance: Restart and apply patches"),    TYPE_FLAG, -  LOCALE(0, "Apply any pending imported patches when the server is " +  LOCALE(1091, "Apply any pending imported patches when the server is "    "automatically restarted."))    ->set_invisibility_check_callback (    lambda(RequestID id, Variable.Variable f)    {return !query("suicide_engage");});       defvar ("mem_cache_gc_2", 5 * 60,    LOCALE(1045, "Cache: Memory cache GC interval"),    TYPE_INT,    LOCALE(1046, #"\   <p>Interval in seconds between RAM cache garbage collector runs. This