From 6b27eabf5bdbc6bf6f71d7b1e7d059dfeab6849b Mon Sep 17 00:00:00 2001 From: Alexander Barton Date: Thu, 11 Jan 2024 14:24:22 +0100 Subject: [PATCH] S2S-TLS: Add notice to INSTALL.md --- INSTALL.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/INSTALL.md b/INSTALL.md index 544c92d4..16c7ea4b 100644 --- a/INSTALL.md +++ b/INSTALL.md @@ -18,6 +18,21 @@ configuration examples. ## Upgrade Information +This section lists important updates and breaking changes that you should be +aware of *before* starting the upgrade: + +Differences to version 26 + +- **Attention**: + Starting with release 27, ngIRCd validates SSL/TLS certificates on outgoing + server-server links by default and drops(!) connections when the remote + certificate is invalid (for example self-signed, expired, not matching the + host name, ...). Therefore you have to make sure that all relevant + *certificates are valid* (or to disable certificate validation on this + connection using the new `SSLVerify = false` setting in the affected + `[Server]` block, where the remote certificate is not valid and you can not + fix this issue). + Differences to version 25 - **Attention**: -- 2.39.2