Inspircd & SSL - Tearing my hair out
reddit / irc

----------------------------------------------------------------------
dogwomble · 2023-04-15 02:03

Hi all,

I'm tearing my hair out a little bit with this one.  I'm in the
process of setting up Inspircd - I've always wanted to have a little
bit of fun with IRC.  The environment I'm setting it up in is Ubuntu
22.04.

I have managed to get it working correctly without any form of
encryption.  However, because everything probably should run over
encryption, I thought adding that to the mix was probably a good idea
if I was going to try and open this up to friends and the like.

I've managed to set up LetsEncrypt and it seems to have happily
created the necessary keys.  I've added the following to my
inspircd.conf:

​

    <sslprofile name="Clients"
                provider="openssl"
                cafile="/path/to/fullchain.pem"
                certfile="/path/to/cert.pem"
                compression="no"
                ecdhcurve="prime256v1"
                hash="sha256"
                keyfile="/path/to/privkey.pem"
                renegotiation="no"
                requestclientcert="no"
                tlsv1="no"
                tlsv11="no"
                tlsv12="yes"
                tlsv13="yes">


Obviously I'm using the correct paths to the files in question - I'm
just obscuring them for security reasons.

When I try and connect now, HexChat gives me the following:

    * Closing link: (obscured)@security [Internal error handling
connection]
    * Disconnected (An established connection was aborted by the
software in your host machine)

I'm probably goofing up something fairly silly but Im probably getting
caught up in frustration so much I'm not seeing it.  To make matters
worse, the only log file I can seem to find that might be relevant is
/var/log/inspircd.log - and that remains a constant 0 bytes, so for
some reason it doesn't seem to be logging anything, which means I
can't seem to get anything useful from there.

I'm thinking a second pair of eyes to try and point me in the right
direction might be useful here.

I'm not sure if this is of any use, however I also have irssi set up
for testing directly on the server which gives me this:

    02:02 -!- ERROR Closing link: (858AAAAAE@127.0.0.1) [Internal
error handling connection]

----------------------------------------------------------------------
CannedDeath · 2023-04-15 03:36

Does the user that inspircd runs as have read access to the cafile,
certfile, and keyfile?

It looks like your sslprofile's name is "Clients", but the default is
"openssl". Did you set sslprofile="Clients" on your  tags?

----------------------------------------------------------------------
KindOne · 2023-04-15 04:31

Try asking on the support channel.

```irc.chatspike.net   #inspircd```