|
|
@@ -254,6 +254,15 @@
|
|
|
[SSL]
|
|
|
# SSL-related configuration options.
|
|
|
|
|
|
+ # SSL Trusted CA Certificates File for verifying peer certificates.
|
|
|
+ # (Default: not set; so no certificates are trusted)
|
|
|
+ ;CAFile = /etc/ssl/certs/ca-certificates.crt
|
|
|
+
|
|
|
+
|
|
|
+ # Certificate Revocation File (for marking otherwise valid
|
|
|
+ # certficates as invalid)
|
|
|
+ ;CRLFile = /etc/ssl/CA/crl.pem
|
|
|
+
|
|
|
# SSL Server Key Certificate
|
|
|
;CertFile = /etc/ssl/certs/server.crt
|
|
|
|
|
|
@@ -347,6 +356,10 @@
|
|
|
# Connect to the remote server using TLS/SSL (Default: false)
|
|
|
;SSLConnect = yes
|
|
|
|
|
|
+ # Verify the TLS certificate presented by the remote server
|
|
|
+ # (Default: yes)
|
|
|
+ ;SSLVerify = yes
|
|
|
+
|
|
|
# Define a (case insensitive) list of masks matching nicknames that
|
|
|
# should be treated as IRC services when introduced via this remote
|
|
|
# server, separated by commas (",").
|
Christoph Biedl