From e8ffea49c26f298b3317fb765f7e6fb378db3923 Mon Sep 17 00:00:00 2001 From: Alexander Barton Date: Thu, 11 Jan 2024 14:24:22 +0100 Subject: [PATCH 18/20] S2S-TLS: Add notice to INSTALL.md (cherry picked from commit 6b27eabf5bdbc6bf6f71d7b1e7d059dfeab6849b) --- INSTALL.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) --- a/INSTALL.md +++ b/INSTALL.md @@ -12,6 +12,20 @@ ## Upgrade Information +This section lists important updates and breaking changes that you should be +aware of *before* starting the upgrade: + +- **Attention**: + Starting with release 27, ngIRCd validates SSL/TLS certificates on outgoing + server-server links by default and drops(!) connections when the remote + certificate is invalid (for example self-signed, expired, not matching the + host name, ...). Therefore you have to make sure that all relevant + *certificates are valid* (or to disable certificate validation on this + connection using the new `SSLVerify = false` setting in the affected + `[Server]` block, where the remote certificate is not valid and you can not + fix this issue). + And this change was backported to this ngIRCd release! + Differences to version 25 - **Attention**: