|
|
@@ -273,6 +273,14 @@
|
|
|
# is only available when ngIRCd is compiled with support for SSL!
|
|
|
# So don't forget to remove the ";" above if this is the case ...
|
|
|
|
|
|
+ # SSL Trusted CA Certificates File for verifying peer certificates.
|
|
|
+ # (Default: not set; so no certificates are trusted)
|
|
|
+ ;CAFile = /etc/ssl/certs/ca-certificates.crt
|
|
|
+
|
|
|
+ # Certificate Revocation File (for marking otherwise valid
|
|
|
+ # certficates as invalid)
|
|
|
+ ;CRLFile = /etc/ssl/CA/crl.pem
|
|
|
+
|
|
|
# SSL Server Key Certificate
|
|
|
;CertFile = /etc/ssl/certs/server.crt
|
|
|
|
|
|
@@ -366,6 +374,10 @@
|
|
|
# Connect to the remote server using TLS/SSL (Default: false)
|
|
|
;SSLConnect = yes
|
|
|
|
|
|
+ # Verify the TLS certificate presented by the remote server
|
|
|
+ # (Default: yes)
|
|
|
+ ;SSLVerify = yes
|
|
|
+
|
|
|
# Define a (case insensitive) list of masks matching nicknames that
|
|
|
# should be treated as IRC services when introduced via this remote
|
|
|
# server, separated by commas (",").
|
Christoph Biedl