Forced to rename SSL certificate

If you hit any installation issues or cannot connect to your freshly installed UnrealIRCd then this forum is for you.

Moderator: Supporters

Post Reply
CrazyCat
Posts: 105
Joined: Thu Apr 28, 2005 1:05 pm
Location: France
Contact:

Forced to rename SSL certificate

Post by CrazyCat » Thu Mar 07, 2019 12:36 pm

Hello there,
I use my own certificate (Let's encrypt), and I didn't rename it. So, when I do the ./unrealircd spkifp, I have errors because it doesn't find the (hardcoded?) conf/ssl/server.cert.pem file.
I think it may be usefull to have an option to give the filename, or better having it extract from the config file.

My 2 cents...

The_Myth
Posts: 37
Joined: Tue Jun 27, 2017 4:42 pm

Re: Forced to rename SSL certificate

Post by The_Myth » Thu Mar 07, 2019 1:42 pm

Probably you need to specify the cert and key via a set::ssl block (you didn't said if it's already done)?

Not sure, but worth a shot?
PeGaSuS

CrazyCat
Posts: 105
Joined: Thu Apr 28, 2005 1:05 pm
Location: France
Contact:

Re: Forced to rename SSL certificate

Post by CrazyCat » Thu Mar 07, 2019 2:52 pm

My block is well configured, I notice the trouble when linking : whatever I did, I had an authentication error. And I noticed that the command is only looking for server.cert.pem, independently of what is set in the configuration file.

Syzop
UnrealIRCd head coder
Posts: 1881
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Re: Forced to rename SSL certificate

Post by Syzop » Thu Mar 07, 2019 6:41 pm

Note that what CrazyCat is saying about the problem is limited to the './unrealircd spkifp' command only, not about the set block.

Crazycat: could it be that you only tried relative paths? I see an issue with that, since the cwd is changed to the tmp directory.
Absolute paths should have worked, though (eg: ./unrealircd spkifp /home/irc/unrealircd/conf/ssl/somecert.pem)

CrazyCat
Posts: 105
Joined: Thu Apr 28, 2005 1:05 pm
Location: France
Contact:

Re: Forced to rename SSL certificate

Post by CrazyCat » Thu Mar 07, 2019 10:58 pm

Well done Syzop, using the absolute path works. I've tried many relatives, and not this, shame on me.
For my defense, the wiki is not up to date, but I don't blame anyone, should I ? :D

Thanks a lot for the solution !

Syzop
UnrealIRCd head coder
Posts: 1881
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Re: Forced to rename SSL certificate

Post by Syzop » Fri Mar 08, 2019 8:26 am

No blame. The fact that relative paths don't work is a bug that should be rectified. I just wanted to make sure that it was the issue you were encountering :)

Syzop
UnrealIRCd head coder
Posts: 1881
Joined: Sat Mar 06, 2004 8:57 pm
Location: .nl
Contact:

Re: Forced to rename SSL certificate

Post by Syzop » Fri Mar 08, 2019 8:34 am

Fixed in git. The fix will be in next UnrealIRCd release.

CrazyCat
Posts: 105
Joined: Thu Apr 28, 2005 1:05 pm
Location: France
Contact:

Re: Forced to rename SSL certificate

Post by CrazyCat » Fri Mar 08, 2019 10:20 am

Thanx a lot !

Regards

Post Reply