SLL Not Working

[ghost]

Hello,

I followed this tutorial https://www.linode.com/docs/guides/install-and-configure-inspircd-on-debian-10-ubuntu-2004/ but can't get it to work with SSL, it works withtout SLL but with SSL I get protocol error

[SadieCat]

That tutorial is extremely outdated. You need to:

1. Load the ssl_gnutls (assuming you're using the Debian v3 package) with <module name="ssl_gnutls">.
2. Add a bind tag which specifies a SSL (TLS) profile like this.
3. Add a SSL profile with the same name as used in your <bind> tag.
4. Restart your server.

InspIRCd ships with a tool called inspircd-testssl which you can run against your server to test your SSL (TLS) configuration.

You may also want to load the sslrehashsignal module which allows you to reload your SSL (TLS) certificates in a post-deploy hook by sending it the SIGUSR1 signal.

[ghost]

Thanks! If I have only the cert.pem and key.pem can I leave the: cafile="" ; crlfile="" ; dhfile="" blank?

[SadieCat]

Generally yes, but on GnuTLS versions older than 3.6.0 you may be required to provide a DH parameters file. You can generate one with certtool --generate-dh-params --sec-param normal --outfile dhparams.pem.

[ghost]

I will try tomorrow, got the limit of certificates generated :/

[ghost]

Everything working now! You can close this. thanks!