Push users towards using SSL profiles for SSL config.

This commit is contained in:
Sadie Powell 2020-12-24 20:55:10 +00:00
parent b425511242
commit aa101e59e5
2 changed files with 18 additions and 13 deletions

View File

@ -141,14 +141,17 @@
# to this bind section.
type="clients"
# ssl: If you want the port(s) in this bind tag to use TLS (SSL), set this to
# the name of a custom <sslprofile> tag that you have defined or one
# of "openssl", "gnutls", "mbedtls" if you have not defined any. See the
# docs page for the TLS (SSL) module you are using for more details.
# ssl: If you want the port(s) in this bind tag to use TLS (SSL), set this
# to the name of a custom <sslprofile> tag that you have defined. See the
# docs page for the TLS (SSL) module you are using for more details:
#
# GnuTLS: https://docs.inspircd.org/3/modules/ssl_gnutls#sslprofile
# mbedTLS: https://docs.inspircd.org/3/modules/ssl_mbedtls#sslprofile
# OpenSSL: https://docs.inspircd.org/3/modules/ssl_openssl#sslprofile
#
# You will need to load the ssl_openssl module for OpenSSL, ssl_gnutls
# for GnuTLS and ssl_mbedtls for mbedTLS.
ssl="gnutls"
ssl="Clients"
# defer: When this is non-zero, connections will not be handed over to
# the daemon from the operating system before data is ready.

View File

@ -10,7 +10,7 @@
<bind address="1.2.3.4"
port="7005"
type="servers"
ssl="gnutls">
ssl="Servers">
# Plaintext listener that binds on a TCP/IP endpoint:
<bind address=""
@ -56,16 +56,18 @@
# failover (see above).
timeout="5m"
# ssl: If defined, this states the TLS (SSL) profile that will be used when
# making an outbound connection to the server. Options are the name of an
# <sslprofile> tag that you have defined or one of "openssl", "gnutls",
# "mbedtls" if you have not defined any. See the docs page for the TLS (SSL)
# module you are using for more details.
# ssl: If defined, this states the TLS (SSL) profile that will be used
# when making an outbound connection to the server. See the docs page for
# the TLS (SSL) module you are using for more details:
#
# GnuTLS: https://docs.inspircd.org/3/modules/ssl_gnutls#sslprofile
# mbedTLS: https://docs.inspircd.org/3/modules/ssl_mbedtls#sslprofile
# OpenSSL: https://docs.inspircd.org/3/modules/ssl_openssl#sslprofile
#
# You will need to load the ssl_openssl module for OpenSSL, ssl_gnutls
# for GnuTLS and ssl_mbedtls for mbedTLS. The server port that you
# connect to must be capable of accepting this type of connection.
ssl="gnutls"
ssl="Servers"
# fingerprint: If defined, this option will force servers to be
# authenticated using TLS (SSL) certificate fingerprints. See
@ -98,7 +100,7 @@
port="7000"
allowmask="203.0.113.0/24 127.0.0.0/8 2001:db8::/32"
timeout="5m"
ssl="gnutls"
ssl="Servers"
bind="1.2.3.4"
statshidden="no"
hidden="no"