Modules/1.1/ssl openssl
From the makers of InspIRCd.
ssl openssl module (InspIRCd-1.1 version)
| 1.1 Documentation | 1.2 Documentation | 2.0 Documentation | 2.1 Documentation |
| Return to the 1.1 Module List | |||
| Description
|
| Allows you to specify ports to accept clients using SSLv3. See Secure_Sockets_Layer for information about SSL in general; this page addresses issues specific to the OpenSSL module. |
| Configuration Tags
|
Add <ssl="openssl" to a <bind> tag to enable SSL on that port, eg:
<bind address="" port="6666" type="clients" ssl="openssl"> You may use SSL on a port with a type of "clients" or of type "servers", however if you use ssl on a server port, you must define a 'transport' value: <bind address="" port="6666" type="servers" transport="openssl"> In 1.2 and earlier, you cannot have SSL on port X on address 1.2.3.4 and plaintext on the same port on another address. There is also a <openssl> tag with several options:
All relative paths in the <openssl> tag are treated as relative to the inspircd config directory, absolute ones are treated as...absolute. Example: <openssl cafile="ca.pem" certfile="cert.pem" keyfile="key.pem" dhfile="dhparams.pem"> |
| Modes
|
| See m_sslmodes.so |
| Extended Bans (Extbans)
|
| This module implements no extended bans. |
| Commands
|
Issuing:
/rehash ssl Will cause all the certificates and Diffie Hellman parameters to be reloaded, <bind> tags are also re-read. |
| Special Notes
|
Important: The OpenSSL module can be unloaded with the /unloadmodule command, *however* this will result in *all* users connecting via the module to be killed off the network with the reason "SSL module unloading", eg:
(23-14:53:46) -ยป (Om)(~om@NetAdmin.easnet.net) has quit (SSL module unloading) Beware of unloading this module! |
| OpenSSL vs. GnuTLS
|
| GnuTLS has been benchmarked against OpenSSL and GnuTLS is significantly faster, InspIRCd has both GnuTLS and OpenSSL support but we recommend the GnuTLS version over this one! It should outperform it and due to GnuTLS's nicer API the module itself is smaller and neater than the OpenSSL module.
GnuTLS Recommended! |
| Installation
| ||
This module requires libssl to work, currently it has been tested with the 0.9 versions of libssl. You must have this and the appropriate header files in order to build the module.
|
