Page 1 of 1

3.2.2b to 3.2.2b SSL (Win32)

Posted: Sat Jan 29, 2005 4:24 am
by DigitalDJ
Ok.

I started off with 3.2.2b SSL for Win32, setup the config file and all.

In the service.log I got -

* Loading IRCd configuration ..
* Configuration loaded without any problems ..

Which was great but the ircd.log reported NOTHING at all. I started up mIRC, tried to connect and got Connection Refused.

I went through the config file for hours trying to think what the hell was wrong and I couldn't figure it out so I tried out the Non-SSL build. BAM! It instantly worked without even editing the config file.

Went back to the SSL build and redid the config from scratch editing as little as possible to make it work and still no go.

Does ANYONE have any idea whats going on here? I've spent hours trying to figure it out and I couldn't seem to find anything here on the forums or the FAQ.

Ps. When I connected I was connecting through non-SSL ports, I tried SSL ports and still nothing. Nothing gave any errrors (ircd.log and service.log were clean).

Posted: Sat Jan 29, 2005 5:00 am
by codemastr
Did you generate an SSL keypair?

Posted: Sat Jan 29, 2005 5:45 am
by DigitalDJ
thats running the makecert.bat and then encpem.bat file yes? then yes i have

just to make sure, what do i put in the set:ssl block? at the moment i have:


ssl {
certificate server.cert.pem;
key server.key.pem;
options {
verify-certificate;
};
};

i re-ran these bat files and they outputed the following files:

server.key.pem
ssl.rnd
server.cert.pem
server.req.pem
server.key.c.pem

but doesnt work :/

thanks for helping :)

Posted: Sun Jan 30, 2005 6:48 am
by DigitalDJ
nothing? :/

Posted: Sun Jan 30, 2005 12:55 pm
by McTerry
Do you have this in your configfile?

ssl {
egd "~/entropy"; // Reads entropy from the domain socket located at '~/entropy'
};

If you have try turning this off by adding some of the comment brackets.
But It shouldn't be this thing that casues it.

I'm currently running the non SSL version if you ask me. :D

Posted: Sun Jan 30, 2005 1:05 pm
by DigitalDJ
it wasnt in my config file...

i tried putting it in...still didnt work :/

Posted: Sun Jan 30, 2005 1:08 pm
by McTerry
I'm a noob my self on SSL. hehe. But one day I will install it. :D

Posted: Sun Jan 30, 2005 2:32 pm
by Dukat
Have you tried without

Code: Select all

 options {
verify-certificate;
}; 
:?:

Posted: Sun Jan 30, 2005 9:28 pm
by DigitalDJ
No Go...

i installed it as a service and it seems that it loads as a process but the bar that tells you how much it is ocmpleted locks up and gives an error saying it terminated unexpectedly. No errors in the event log either.

Posted: Sun Jan 30, 2005 9:36 pm
by codemastr
It sounds like you have encrypted the SSL certificate - don't do that.

Posted: Mon Jan 31, 2005 4:20 am
by DigitalDJ
i did, but why cant i encrypt it ? :/

i just reisntalled SSL and did not encrypt it - it worked!

thanks for that

is there anyway i can run it with an encrypted certificate - wouldnt it be more secure?

Posted: Mon Jan 31, 2005 4:33 pm
by McTerry
Cool. I never knew that. I think you can't encrypt it becouse Unreal IRCd wont be able to access the SSL data.
I'm not sure but thats what I think. It should however be encrypted for other USERS outside the server.
:roll:

Posted: Mon Jan 31, 2005 5:49 pm
by Ron2K
My experiences running Win32-SSL as an NT Service with an encrypted cert have been unsuccessful. Every time.

Posted: Tue Feb 01, 2005 12:17 am
by aquanight
Because Unreal has to ask you for the SSL cert password to use it. And running as an NT Service means it can't ask for that password.

Posted: Tue Feb 01, 2005 2:49 am
by DigitalDJ
but if i dont run it as a service it still doesnt work.