1
0

0018-S2S-TLS-Add-notice-to-INSTALL.patch 1.1 KB

123456789101112131415161718192021222324252627282930
  1. From 37dcb74898f4ff7e211088cf831996ea5e2471f1 Mon Sep 17 00:00:00 2001
  2. From: Alexander Barton <alex@barton.de>
  3. Date: Thu, 11 Jan 2024 14:24:22 +0100
  4. Subject: [PATCH 18/20] S2S-TLS: Add notice to INSTALL
  5. (cherry picked from commit 6b27eabf5bdbc6bf6f71d7b1e7d059dfeab6849b)
  6. ---
  7. INSTALL | 11 +++++++++++
  8. 1 file changed, 11 insertions(+)
  9. --- a/INSTALL
  10. +++ b/INSTALL
  11. @@ -12,6 +12,17 @@
  12. I. Upgrade Information
  13. ~~~~~~~~~~~~~~~~~~~~~~
  14. +- **Attention**:
  15. + Starting with release 27, ngIRCd validates SSL/TLS certificates on outgoing
  16. + server-server links by default and drops(!) connections when the remote
  17. + certificate is invalid (for example self-signed, expired, not matching the
  18. + host name, ...). Therefore you have to make sure that all relevant
  19. + *certificates are valid* (or to disable certificate validation on this
  20. + connection using the new `SSLVerify = false` setting in the affected
  21. + `[Server]` block, where the remote certificate is not valid and you can not
  22. + fix this issue).
  23. + And this change was backported to this ngIRCd release!
  24. +
  25. Differences to version 22.x
  26. - The "NoticeAuth" ngircd.conf configuration variable has been renamed to