1
0

0018-S2S-TLS-Add-notice-to-INSTALL.md.patch 1.2 KB

123456789101112131415161718192021222324252627282930313233
  1. From e8ffea49c26f298b3317fb765f7e6fb378db3923 Mon Sep 17 00:00:00 2001
  2. From: Alexander Barton <alex@barton.de>
  3. Date: Thu, 11 Jan 2024 14:24:22 +0100
  4. Subject: [PATCH 18/20] S2S-TLS: Add notice to INSTALL.md
  5. (cherry picked from commit 6b27eabf5bdbc6bf6f71d7b1e7d059dfeab6849b)
  6. ---
  7. INSTALL.md | 14 ++++++++++++++
  8. 1 file changed, 14 insertions(+)
  9. --- a/INSTALL.md
  10. +++ b/INSTALL.md
  11. @@ -12,6 +12,20 @@
  12. ## Upgrade Information
  13. +This section lists important updates and breaking changes that you should be
  14. +aware of *before* starting the upgrade:
  15. +
  16. +- **Attention**:
  17. + Starting with release 27, ngIRCd validates SSL/TLS certificates on outgoing
  18. + server-server links by default and drops(!) connections when the remote
  19. + certificate is invalid (for example self-signed, expired, not matching the
  20. + host name, ...). Therefore you have to make sure that all relevant
  21. + *certificates are valid* (or to disable certificate validation on this
  22. + connection using the new `SSLVerify = false` setting in the affected
  23. + `[Server]` block, where the remote certificate is not valid and you can not
  24. + fix this issue).
  25. + And this change was backported to this ngIRCd release!
  26. +
  27. Differences to version 25
  28. - **Attention**: