Page 1 of 1

Change ssl certificate

Posted: Fri Feb 03, 2017 9:32 pm
by TaTHaR
Hello,

when I was testing my new server I installed UnrealIRCD. Now that server is live for months already and updated to v4.0.10
When I tested I used an other server name like irc.blabla.com But now it is since its live irc.bleble.com (I dont wanna spam) :)
But now I wanted to use with a irc client SSL and it worked only the certificate is on the name of the test server. Is there a way to change the server name for the SSL certificate?

Best Regards, Herman.

Re: Change ssl certificate

Posted: Sat Feb 04, 2017 10:45 am
by Syzop
You can generate a new certificate by doing the following from your unrealircd sources directory (eg: /home/syzop/unrealircd-4.0.10)...

To generate the certificate:

Code: Select all

make pem
Then manually copy the necessary files (server.*.pem) to your conf/ssl of your installed unrealircd directory. In this example it assumes the sources directory is /home/syzop/unrealircd-4.0.10 and you installed UnrealIRCd to /home/syzop/unrealircd:

Code: Select all

cp /home/syzop/unrealircd-4.0.10/server.*.pem /home/syzop/unrealircd/conf/ssl/
(Or, if you are on Windows then replace the above two steps with: Start Menu -> UnrealIRCd 4 -> Make certificate)

Finally, on IRC while connected to this server do:

Code: Select all

/REHASH -ssl
This will load the new certificate.

Re: Change ssl certificate

Posted: Sat Feb 04, 2017 1:54 pm
by TaTHaR
Hello Syzop,

thank you verry much for the clear answer :) It looks like it went okay but one more thing........
When in connect using ssl the certficate pops up with the correct info but I get this line:

Your connection to the server is encrypted, however there is a problem with the server's security certificate.

Is this an error and should it be fixed? If yes how? Or is it how it should be?

Best Regards, Herman.

Re: Change ssl certificate

Posted: Sat Feb 04, 2017 9:40 pm
by rcschaff
Herman. That's because your certificates are self signed, and therefor not from a trusted root CA. If you don't want people to see the notices, you would have to buy a certificate from someone such as geotrust or verasign. Though this is not necessary, it's just a warning.

Re: Change ssl certificate

Posted: Sat Feb 04, 2017 9:57 pm
by TaTHaR
Thanks for your reply rcschaff. I know enough.

Best regards, Herman.