From: Alexander Barton <alex@barton.de>
Date: Thu, 11 Jan 2024 13:24:22 +0000 (+0100)
Subject: S2S-TLS: Add notice to INSTALL.md
X-Git-Tag: rel-27-rc1~20
X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd-alex.git;a=commitdiff_plain;h=6b27eabf5bdbc6bf6f71d7b1e7d059dfeab6849b

S2S-TLS: Add notice to INSTALL.md
---

diff --git a/INSTALL.md b/INSTALL.md
index 544c92d4..16c7ea4b 100644
--- a/INSTALL.md
+++ b/INSTALL.md
@@ -18,6 +18,21 @@ configuration examples.
 
 ## Upgrade Information
 
+This section lists important updates and breaking changes that you should be
+aware of *before* starting the upgrade:
+
+Differences to version 26
+
+- **Attention**:
+  Starting with release 27, ngIRCd validates SSL/TLS certificates on outgoing
+  server-server links by default and drops(!) connections when the remote
+  certificate is invalid (for example self-signed, expired, not matching the
+  host name, ...). Therefore you have to make sure that all relevant
+  *certificates are valid* (or to disable certificate validation on this
+  connection using the new `SSLVerify = false` setting in the affected
+  `[Server]` block, where the remote certificate is not valid and you can not
+  fix this issue).
+
 Differences to version 25
 
 - **Attention**: