Hi, indeed this was about breaking configuration changes I had missed. The
experimental version suggested by Adrian Bunk turned out to just cause
additional hurdles though - we struggled for a couple of hours with
perfectly good configs altered for 4.x, but this experimental version
somehow prevented things from working. Ultimately downgrading to the
trixie 4.7.0+ds1-2 version with proper configs this time resulted in
working server links.

In addition to the quite trivial syntax changes, the biggest problem was
actually how we were using MD5 fingerprints earlier, and many configuration
examples fail to support this in migration.

In the end nothing special was required to support self-signed certificates
here, just the syntax changes and comparing with correct hash type. For
reference this is the current minimalistic config that does work with 4.x
for us

<server name="redacted">

<module name="m_spanningtree.so">
<module name="m_sslinfo.so">
<module name="m_ssl_gnutls.so">

<bind address="127.0.0.1" port="6667">
<connect allow="127.0.0.1" port="6667">

<sslprofile name="server" provider="gnutls" hash="sha256">
<bind address="" port="6666" sslprofile="server" type="servers">
<link name="redacted" ipaddr="redacted" port="6666" sendpass="x"
recvpass="x" sslprofile="server" fingerprint="redacted">

<pid file="/var/run/inspircd.pid">

<log method="file" type="* -USERINPUT -USEROUTPUT" level="default"
target="/var/log/inspircd.log">

Bug can be closed, hopefully this is clearly communicated for anyone using
apt-listchanges (I wasn't...)

Regards,
Juha Kallio

Reply via email to