How do I configure SSL for ircd-hybrid?
reddit / irc

----------------------------------------------------------------------
clocktick0 · 2016-05-03 10:29

In my ircd.conf, inside the server block, I've added the following
lines:

rsa_private_key_file = "/home/user/ircd/etc/rsa.key";
ssl_certificate_file = "/home/user/ircd/etc/cert.pem";
ssl_dh_param_file = "/home/user/ircd/etc/dhparam.pem";

The files are owned by "user". But when I try to connect to the server
with "/server -ssl <server ip> +6667", I see the error "warning SSL
handshake failed: unknown protocol".

Connection without ssl works fine.

----------------------------------------------------------------------
CannedDeath · 2016-05-03 11:48

You almost certainly can't use SSL on port 6667 while still having
plaintext connections on that port. Try +6697. If that doesn't work,
check your listen blocks.

----------------------------------------------------------------------
clocktick0 · 2016-05-03 12:04

Thanks for your reply. I tried connecting to +6697, but I get the
following error:

"warning SSL handshake failed: Connection refused"

I have added "port = +6697" to the listen block in my config file, and
also opened the port with iptables. Do you have any idea why it is
still blocked?

----------------------------------------------------------------------
CannedDeath · 2016-05-03 12:24

It should probably be added as 6697 instead of 6667.  You also might
have to restart the ircd.  I would also check the server logs, but I'm
not sure where those are for hybrid.

----------------------------------------------------------------------
clocktick0 · 2016-05-03 12:34

I have added it as 6697 in the ircd config file, which is /etc/ircd-
hybrid/ircd.conf. I have also restarted ircd-hybrid multiple times.
What else could be blocking the port?

----------------------------------------------------------------------
j4jackj · 2016-05-03 21:37

Missing certs

----------------------------------------------------------------------
clocktick0 · 2016-05-03 22:17

Which certs do you think are missing? As i've stated in my original
post, I have given the correct path to the cert files in the ircd
config file.

----------------------------------------------------------------------
CannedDeath · 2016-05-03 22:33

Check the logs and maybe your firewall rules.

----------------------------------------------------------------------
j4jackj · 2016-05-04 03:56

Have you restarted the ircd?

----------------------------------------------------------------------
clocktick0 · 2016-05-04 10:48

Yes I have restarted it multiple times..

----------------------------------------------------------------------
clocktick0 · 2016-05-04 10:50

I have opened all the necessary ports by updating the iptables rules.
The ircd logs don't show anything concerning failed ssl connections,
or blocked incoming connections.