Page 1 of 1

Linked up using SSL

Posted: Sat Mar 19, 2005 7:53 am
by fluid
link server1ip
{
username *;
hostname theserver1ip;
bind-ip *;
port theportweuse;
hub *;
password-connect "thepasswordnoitsnottherealonesilly";
password-receive "thepasswordnoitsnottherealonesilly";
class servers;
options {
/* Note: You should not use autoconnect when linking services */
autoconnect;
# ssl;
zip;
};
};


You can see I have the ssl commented out, only reason it was commented out is because were having problems linking up to eachother when its uncommented. Other then that we linkup fine.

Just want to know what we can do to get this uncommented and working.
The 2 servers are win2kserver, with unrealSSL ircd's, openssl isnt installed on the server, but i do see the openssl.exe in the unreal dir.

Would we need to install openssl on the server too,
or will the exe in the unreal dir be ok. If so, how can we get it to work correctly. What "link" port# do you recommed for me to use that will support the ssl "link" connection.

Thanks~
fluid-

PS: we do use a password for our users to use to connect to the ircd server, if that has anything to do with it, which i dont think it does, cause its just for the client connect port and not the link port.

Posted: Sat Mar 19, 2005 9:03 am
by Dukat
Did you read http://forums.unrealircd.com/viewtopic.php?t=329 ?

Please show us your server listen block, too... It has to accept SSL connections.


But anyway, you have to tell us exactly what your problem was; "because were having problems linking up to eachother" isn't very helpful... :P

Posted: Mon Mar 21, 2005 2:55 pm
by fluid
listen *:9999
{
options
{
ssl;
clientsonly;
};
};

listen *:8067;
listen *:6667;



My "Link" port is 8067.

9999 is listening for my clients.


My LINK
---------------

link server1ip
{
username *;
hostname theserver1ip;
bind-ip *;
port 8067;
hub *;
password-connect "********";
password-receive "********";
class servers;
options {
/* Note: You should not use autoconnect when linking services */
autoconnect;
# ssl; <------ i want to uncomment this, and be able to link to the other server via ssl
zip;
};
};


What can i do to fix? Should i change "link" ports? to like 994?
My users can connect to our servers via ssl with no problem,
I just want to "Link" the servers via ssl so the traffic inbetween the 2 linked servers are encrypted. . thnx in advance.

Posted: Mon Mar 21, 2005 3:41 pm
by Matridom
fluid wrote: listen *:8067;
your listen block is wrong..

Code: Select all

listen          *:8067 {
        options {
                serversonly;
                ssl;
        };
};

Posted: Mon Mar 21, 2005 4:05 pm
by fluid
OK so now my listen block should look like this?

listen *:9999
{
options
{
ssl;
clientsonly;
};
};
listen *:8067 {
options {
serversonly;
ssl;
};
};


Thanks. just want to double check with you.

Posted: Mon Mar 21, 2005 4:22 pm
by Dukat
Yes.
But you should keep a listen block for port 6667 :wink:

Posted: Mon Mar 21, 2005 4:42 pm
by fluid
Thanks for your help, it works now :)


[11:41] -myip- *** Listener on *:8067, clients 1. is PERM serversonly SSL
-
[11:41] -myip- *** Listener on *:9999, clients 7. is PERM clientsonly SSL