banimod / etpro / ettv forums Forum Index banimod / etpro / ettv forums
Bani's Discussion Forums
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Certifying your etpro .config
Goto page Previous  1, 2, 3  Next
 
Post new topic   Reply to topic    banimod / etpro / ettv forums Forum Index -> ET Server Admins
View previous topic :: View next topic  
Author Message
deej



Joined: 19 Mar 2004
Posts: 743
Location: Belgium!

PostPosted: Wed May 18, 2005 12:16 am    Post subject: Reply with quote

[pH*Deus] wrote:
Another way could be that the leagues have a little textfile at the given domain that et can download which contains the recent verison-number and can be compared to the config.

in every case this information needs to be available 24/7


Well the subdomain stuff is a great idea but IMO but I can see the practical objections.

Instead of version textfiles, why not compare signatures? The leagues store their latest config in a http path etpro can check. ETPro retrieves the signature of the config file present and compares it to the signature of the config loaded on the gameserver.

If these differ ETPro assumes that the config on the http location is the recent and notifies the players that the config on the server is not the latest available.

In a further evolution of ETPro you can even imagine that ETPro could autodownload the new .config file from the league's http page Wink.

Guess you would need something like these extra parameters inside a certified .config file:

Code:
b_config_root "http://www.leetleague.com/etpro/config"
b_config_backup "http://alternateserver.com/etpro/config"


(Backup because we all know Murphy's a bitch)

In the general server.cfg file you could then set an extra parameter called b_autoupdateconfig to allow automatic updating of known configs.

If this idea would be implemented I think it's very important to put the "root" and "backup" paths inside the .config otherwise the system won't work.

Just brainstorming here a bit, I have absolutely no idea on how easy / difficult it is to actually write that stuff.
_________________
Our servers now run on 64 bit steroids. Point your ET to:
- Forgotten Ground StopWatch Server with occasional wolfrof 1
- Fraggle Rock ETPub Server - Mix up ET/UT & Duke Nukem
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Deus



Joined: 12 Mar 2004
Posts: 1053
Location: Germany

PostPosted: Wed May 18, 2005 12:58 am    Post subject: Reply with quote

the idea of storing the signature atthe leagues page sounds good to me.
Not that anyone is able to build one for the config itself.

but this prevents the above case.

but ...

with only signature comparison it can only be said that the config is actual or not. There is no way to say if the config has been tempered with or just is outdated.
Its not really importent, but when someone alters the config he has to be punished harder then as when he just forgot to update.
So back to the file again Smile
Code:
config.signature
{
configname "name here"
configversion "1.3.3.7"
signature "putsighere"
}

so the signature can be removed from the actual .config
_________________

http://spielwelt15.monstersgame.net/?ac=vid&vid=39033566
Back to top
View user's profile Send private message Visit poster's website
deej



Joined: 19 Mar 2004
Posts: 743
Location: Belgium!

PostPosted: Wed May 18, 2005 1:13 am    Post subject: Reply with quote

[pH*Deus] wrote:
with only signature comparison it can only be said that the config is actual or not. There is no way to say if the config has been tempered with or just is outdated.
Its not really importent, but when someone alters the config he has to be punished harder then as when he just forgot to update.
So back to the file again Smile
Code:
config.signature
{
configname "name here"
configversion "1.3.3.7"
signature "putsighere"
}

so the signature can be removed from the actual .config


Well I disagree here because you go against (or more correct: deviate from) the laws of cryptography.

I assume the signature is a Hash (MD5 / sha / whatever) of some sort which means you take the hash of the non-certified config file & append that 'signature' to the file. The gameserver then does the same operation for the certified config file (but omits the last signature line) and compares the calculated signature with the appended signature. If they match the signature is valid & the config is named "certified".

If someone alters only 1 character inside a certified config the hashes (i.e. signatures) will never match and thus the server will call the loaded config "not certified".

So my idea works if you assume that the leagues path contains the most recent config. Configs remain certified if the sig calculation is correct but if that sig differs form what it can find on the web it is out of date. So as such you don't say which is the most recent version but you do know where to find the latest version.

Both ways of working have advantages: by working with a .sig file you have more control but also more management overhead. So I guess it'll be a trade-off.
_________________
Our servers now run on 64 bit steroids. Point your ET to:
- Forgotten Ground StopWatch Server with occasional wolfrof 1
- Fraggle Rock ETPub Server - Mix up ET/UT & Duke Nukem
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Pangea



Joined: 12 Aug 2004
Posts: 23

PostPosted: Wed May 18, 2005 7:30 am    Post subject: Reply with quote

Another thing: before all configs got certified and we still just one server which was public while not playing a war, I used to add g_password to the configs, which was very handy. Now it's not possible any more, but I don't care because we have an extra private server now. Razz
But for all the clans using one server as public and private, a cvar which stores a password, that will be set as soon as a certified config is loaded, might be a nice feature.
Back to top
View user's profile Send private message
deej



Joined: 19 Mar 2004
Posts: 743
Location: Belgium!

PostPosted: Wed May 18, 2005 8:00 am    Post subject: Reply with quote

If you use a clan for both private & public play use default_comp.cfg & default_pub.cfg to set passwords and break rotations. Much easier than storing passwords in configs.

It's explained very well in DG's server guide.
_________________
Our servers now run on 64 bit steroids. Point your ET to:
- Forgotten Ground StopWatch Server with occasional wolfrof 1
- Fraggle Rock ETPub Server - Mix up ET/UT & Duke Nukem
Back to top
View user's profile Send private message Send e-mail Visit poster's website
daita



Joined: 03 Mar 2005
Posts: 48
Location: Jungle

PostPosted: Tue Oct 04, 2005 2:07 am    Post subject: Reply with quote

[pH*Deus] wrote:

the signature is done by etprodevteam to certify the config is in its pure state and has not been tempered with.


Can we get a mailbox where to send our league config file to get it certified ?

daita.
Back to top
View user's profile Send private message Visit poster's website Yahoo Messenger MSN Messenger
deej



Joined: 19 Mar 2004
Posts: 743
Location: Belgium!

PostPosted: Tue Oct 04, 2005 8:32 am    Post subject: Reply with quote

Just pm one of the developpers.
_________________
Our servers now run on 64 bit steroids. Point your ET to:
- Forgotten Ground StopWatch Server with occasional wolfrof 1
- Fraggle Rock ETPub Server - Mix up ET/UT & Duke Nukem
Back to top
View user's profile Send private message Send e-mail Visit poster's website
daita



Joined: 03 Mar 2005
Posts: 48
Location: Jungle

PostPosted: Fri Oct 21, 2005 3:48 am    Post subject: Reply with quote

and how many month do we have to wait to get the config certified ?

daita.
Back to top
View user's profile Send private message Visit poster's website Yahoo Messenger MSN Messenger
Deus



Joined: 12 Mar 2004
Posts: 1053
Location: Germany

PostPosted: Fri Oct 21, 2005 7:08 am    Post subject: Reply with quote

between 5 minutes and 3 month Wink

usually it does not take long if you meet the requirements
_________________

http://spielwelt15.monstersgame.net/?ac=vid&vid=39033566
Back to top
View user's profile Send private message Visit poster's website
MerCuryRisIng



Joined: 11 Jun 2005
Posts: 5
Location: Australia

PostPosted: Mon Jan 30, 2006 12:31 pm    Post subject: Reply with quote

Code:
configname Austourney-3V3
init
{
   // AusTourney 3v3 Competition. January 2006 //
   setl sv_pure 1
   setl g_gametype 3
   setl g_doWarmup 1
   setl g_warmup 10       
   setl g_heavyWeaponRestriction 20
   setl g_altStopwatchMode 0
   setl g_autofireteams 0
   setl g_complaintlimit 0
   setl g_ipcomplaintlimit 0
   setl g_fastres 0
   setl g_friendlyFire 1
   setl g_maxlives 0
   setl g_alliedmaxlives 0
   setl g_axismaxlives 0
   setl g_teamforcebalance 0
   setl g_noTeamSwitching 0
   setl g_voiceChatsAllowed 99
   setl g_spectatorInactivity 0 

   set nextmap ""

   set g_log austourney3V3-match.log

   setl team_maxMortars 0
   setl team_maxFlamers 0
   setl team_maxMg42s 0
   setl team_maxPanzers 0
   setl team_maxplayers 0
   setl team_nocontrols 0
   setl team_maxMines 0
   setl team_maxriflegrenades 0

   setl match_latejoin 1
   setl match_minplayers 2
   setl match_mutespecs 0
   setl match_readypercent 100
   setl match_timeoutcount 2
   setl match_timeoutlength 120
   set  match_warmupDamage 2

   setl sv_cheats 0

   setl sv_maxRate 25000
   setl sv_dl_maxRate 42000
   setl sv_floodProtect 0         
   setl sv_minping 0
   setl sv_maxping 0

   setl pmove_fixed 0
   setl pmove_msec 8

   setl g_allowVote 1
   setl vote_limit 99
   setl vote_percent 51
   setl vote_allow_comp 0
   setl vote_allow_gametype 0
   setl vote_allow_kick 0
   setl vote_allow_map 0
   setl vote_allow_matchreset 1
   setl vote_allow_mutespecs 0
   setl vote_allow_nextmap 0
   setl vote_allow_pub 0
   setl vote_allow_referee 1
   setl vote_allow_shuffleteams 0
   setl vote_allow_swapteams 0
   setl vote_allow_friendlyfire 0
   setl vote_allow_timelimit 0
   setl vote_allow_warmupdamage 1
   setl vote_allow_balancedteams 0
   setl vote_allow_muting 0
   setl vote_allow_cointoss 0

   setl b_pronedelay 1
   setl b_extendprone 1
   setl b_stickycharge 2
   setl b_antiwarp 1    
   setl b_fixedphysics 1
   setl b_fixedphysicsfps 125     
   setl b_defaultskills ""
   setl b_banners 0
   setl b_noskillupgrades 0
   setl b_shove 0
   setl b_statsaver 1
   setl b_intermissiontime 30
   setl b_privatemessages 0
   setl b_xpstopwatch 0
   setl b_levels_battlesense "-1"
   setl b_levels_engineer "-1"
   setl b_levels_medic "-1"
   setl b_levels_fieldops "-1"
   setl b_levels_lightweapons "-1"
   setl b_levels_soldier "-1"
   setl b_levels_covertops "-1"
   setl b_riflegrenades 0 
   setl b_realhead 1 

   setl g_medicChargeTime 45000
   setl g_engineerChargeTime 30000
   setl g_LTChargeTime 40000
   setl g_soldierChargeTime 20000
   setl g_covertopsChargeTime 30000

   setl b_headshot 0
   setl b_damagexp 0
   setl b_customVoiceChat 1
   setl b_intreadypercent 100
   setl b_multiview 1
   setl b_spectatornames 1
   setl b_panzerlevelup 1

   setl g_filtercams 1

   setl b_shrug 0
   setl b_wolfrof 0
   setl b_distancefalloff 1
   setl b_helmetprotection 1
   setl b_maxmortarpitch 20
   setl b_chargetransfer 0
   setl b_sv_hitsounds 1

   setl g_speed 320
   setl g_gravity 800
   setl g_knockback 1000

   setl b_anticheat 1
   setl b_cheatkicktime 1
   set  b_cheatlog AusTourney_3v3.log

   setl b_mapscriptdirectory etpromapscripts
   setl b_mapconfigdirectory ""

command "pb_sv_enable"
command "pb_sv_kicklen 1"
command "pb_sv_cvarempty"
command "sv_cvarempty"

command "sv_cvar rate IN 3500 25000"
command "sv_cvar snaps EQ 20"
command "sv_cvar cg_bobup IN -0.005 0.005"
command "sv_cvar cg_fov IN 90 120"
command "sv_cvar cg_shadows IN 0 1"
command "sv_cvar cl_freelook EQ 1"
command "sv_cvar cl_maxpackets IN 20 100"
command "sv_cvar cl_timenudge EQ 0"
command "sv_cvar m_pitch OUT -0.015 0.015"
command "sv_cvar m_yaw IN -0.022 0.022"
command "sv_cvar r_allowextensions EQ 1"
command "sv_cvar r_ati_fsaa_samples EQ 0"
command "sv_cvar r_ati_truform_tess EQ 0"
command "sv_cvar r_clampToEdge EQ 1"
command "sv_cvar r_colorMipLevels EQ 0"
command "sv_cvar r_detailtextures EQ 0"
command "sv_cvar r_drawentities EQ 1"
command "sv_cvar r_drawworld EQ 1"
command "sv_cvar r_ext_ATI_pntriangles EQ 0"
command "sv_cvar r_flares IN 0 1"
command "sv_cvar r_lightmap EQ 0"
command "sv_cvar r_lodcurveerror GE 60"
command "sv_cvar r_nv_fogdist_mode INCLUDE NV GL_EYE_RADIAL_NV"
command "sv_cvar r_primitives IN 0 2"
command "sv_cvar r_showmodelbounds EQ 0"
command "sv_cvar r_showtris EQ 0"
command "sv_cvar r_subdivisions IN 1 64"
command "sv_cvar r_znear EQ 3"
command "sv_cvar cl_pitchspeed EQ 0"
}

// Permap settings
map default
{
set g_userTimeLimit 0
set g_useralliedrespawntime 0
set g_useraxisrespawntime 0
set b_moverscale 1
command "forcecvar r_drawfoliage 1"
}
map adlernest_b5
{
set g_userTimeLimit 15
}
map townsquare_final
{
set g_userTimeLimit 12
}
map frost_beta3
{
set g_userTimeLimit 12
}
map et_village
{
set g_userTimeLimit 15
}


-.- theres the AusTourney.com .config
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
bani
Site Admin


Joined: 21 Jul 2002
Posts: 3685

PostPosted: Wed Oct 18, 2006 10:27 pm    Post subject: Reply with quote

someone should move this info to WolfWiki
Back to top
View user's profile Send private message Send e-mail Visit poster's website
AmC0rp



Joined: 03 Mar 2008
Posts: 2

PostPosted: Sun Mar 09, 2008 2:07 am    Post subject: Reply with quote

Sorry for reopening after more than one year.
We run a tournament, and we would like to get our config certified.
Is still possible?

Thanks
Back to top
View user's profile Send private message Send e-mail Visit poster's website MSN Messenger
Deus



Joined: 12 Mar 2004
Posts: 1053
Location: Germany

PostPosted: Tue Mar 11, 2008 11:31 am    Post subject: Reply with quote

Yes
You're welcome
_________________

http://spielwelt15.monstersgame.net/?ac=vid&vid=39033566
Back to top
View user's profile Send private message Visit poster's website
locki



Joined: 13 Aug 2009
Posts: 8

PostPosted: Sat Oct 17, 2009 2:15 pm    Post subject: Reply with quote

Certification cracked :

http://chaplja.blogspot.com/2009/09/etpro-certified-configs.html

http://chaplja.blogspot.com/2009/09/etpro-certification-tool.html
Back to top
View user's profile Send private message Send e-mail
ReyalP



Joined: 25 Jul 2003
Posts: 1663

PostPosted: Mon Oct 26, 2009 1:05 pm    Post subject: Reply with quote

locki wrote:
Certification cracked :

http://chaplja.blogspot.com/2009/09/etpro-certified-configs.html

http://chaplja.blogspot.com/2009/09/etpro-certification-tool.html

Welcome to two years ago. And GG chaplja, hero of et anticheat. Looks like you were a scumbag after all.

Edit to add:
We (by which I mean I) are no longer signing configs, because tools to forge the signature are widely available. The only thing signing would do is give people a false sense of security.

If you really want the pretty green text, feel free to sign them yourself.
_________________
send lawyers, guns and money
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    banimod / etpro / ettv forums Forum Index -> ET Server Admins All times are GMT - 8 Hours
Goto page Previous  1, 2, 3  Next
Page 2 of 3

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group