Linked up using SSL

fluid · Post by **fluid** » Sat Mar 19, 2005 7:53 am

link server1ip
{
username *;
hostname theserver1ip;
bind-ip *;
port theportweuse;
hub *;
password-connect "thepasswordnoitsnottherealonesilly";
password-receive "thepasswordnoitsnottherealonesilly";
class servers;
options {
/* Note: You should not use autoconnect when linking services */
autoconnect;
# ssl;
zip;
};
};

You can see I have the ssl commented out, only reason it was commented out is because were having problems linking up to eachother when its uncommented. Other then that we linkup fine.

Just want to know what we can do to get this uncommented and working.
The 2 servers are win2kserver, with unrealSSL ircd's, openssl isnt installed on the server, but i do see the openssl.exe in the unreal dir.

Would we need to install openssl on the server too,
or will the exe in the unreal dir be ok. If so, how can we get it to work correctly. What "link" port# do you recommed for me to use that will support the ssl "link" connection.

Thanks~
fluid-

PS: we do use a password for our users to use to connect to the ircd server, if that has anything to do with it, which i dont think it does, cause its just for the client connect port and not the link port.

Dukat · Post by **Dukat** » Sat Mar 19, 2005 9:03 am

Did you read http://forums.unrealircd.com/viewtopic.php?t=329 ?

Please show us your server listen block, too... It has to accept SSL connections.

But anyway, you have to tell us exactly what your problem was; "because were having problems linking up to eachother" isn't very helpful...

fluid · Post by **fluid** » Mon Mar 21, 2005 2:55 pm

listen *:9999
{
options
{
ssl;
clientsonly;
};
};

listen *:8067;
listen *:6667;

My "Link" port is 8067.

9999 is listening for my clients.

My LINK
---------------

link server1ip
{
username *;
hostname theserver1ip;
bind-ip *;
port 8067;
hub *;
password-connect "********";
password-receive "********";
class servers;
options {
/* Note: You should not use autoconnect when linking services */
autoconnect;
# ssl; <------ i want to uncomment this, and be able to link to the other server via ssl
zip;
};
};

What can i do to fix? Should i change "link" ports? to like 994?
My users can connect to our servers via ssl with no problem,
I just want to "Link" the servers via ssl so the traffic inbetween the 2 linked servers are encrypted. . thnx in advance.

Matridom · Post by **Matridom** » Mon Mar 21, 2005 3:41 pm

fluid wrote: listen *:8067;

your listen block is wrong..

Code: Select all

listen          *:8067 {
        options {
                serversonly;
                ssl;
        };
};

fluid · Post by **fluid** » Mon Mar 21, 2005 4:05 pm

OK so now my listen block should look like this?

listen *:9999
{
options
{
ssl;
clientsonly;
};
};
listen *:8067 {
options {
serversonly;
ssl;
};
};

Thanks. just want to double check with you.

Dukat · Post by **Dukat** » Mon Mar 21, 2005 4:22 pm

Yes.
But you should keep a listen block for port 6667

fluid · Post by **fluid** » Mon Mar 21, 2005 4:42 pm

Thanks for your help, it works now

[11:41] -myip- *** Listener on *:8067, clients 1. is PERM serversonly SSL
-
[11:41] -myip- *** Listener on *:9999, clients 7. is PERM clientsonly SSL