From: Alexander Barton <alex@barton.de>
Date: Mon, 1 Jan 2024 17:20:26 +0000 (+0100)
Subject: Respect "SSLConnect" option for incoming connections
X-Git-Tag: rel-27-rc1~92
X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=21c1751b045b0be49e584a4ba191a330e0c381bb;hp=21c1751b045b0be49e584a4ba191a330e0c381bb;p=ngircd.git

Respect "SSLConnect" option for incoming connections

Don't accept incoming plain-text ("non SSL") server connections for
servers configured with "SSLConnect" enabled.

If "SSLConnect" is not set for an incoming connection the server still
accepts both plain-text and encrypted connections.

This change prevents an authenticated client-server being able to force
the server-server to send its password on a plain-text connection when
SSL/TLS was intended.
---