View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0002556unrealircdpublic2005-06-08 02:502005-10-22 10:13
ReporterRalish Assigned To 
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionunable to duplicate 
Product Version3.2.3 
Summary0002556: Unable to Link UnrealIRCd's with SSL Support
DescriptionGreetings,

I have successfully compiled, configured and executed a copy of UnrealIRCd3.2.3 from source w/ the win32devel pack (www.vulnscan.org/unrealwin32dev/). The compile was completed under MS Windows XP Pro SP 2 using MS Visual Studio .NET 2003 w/ curl + ssl + zip support included. The compile appears to have been a complete success, with no errors or issues during the compilation and execution.

However, I am unable no matter what I do to get two UnrealIRCd servers (exact same build but different link blocks/numerics/etc...) to link with SSL Support. Without SSL Support (but with ZipLinks) the servers will link fine with no issues. With SSL Support the servers will refuse to link! I have managed to retrieve the following feedback:

From Server 1 (receiving Link from Server 2 - information from 'junk' snomask):
[ 04:21:57:pm ] · · Server : Exiting ssl client pnc.massive.net[@192.168.0.21.2799]: SSL_connect(): Internal OpenSSL error or protocol error

From Server 2 (initiating Link with Server 1 - information from 'junk' snomask):
[ 04:26:57:pm ] · · Server : Notice -- Connection to pnc.massive.net[192.168.0.11] activated.
[ 04:27:01:pm ] · · Server : Exiting ssl client pnc.massive.net[@192.168.0.11.0]: SSL_connect(): Internal OpenSSL error or protocol error

After searching through the Unreal Forums I am under the impression this issue affects all recent builds of UnrealIRCd and is OS-Independent. Furthermore, this forum post appears to detail my exact same issue, although no solution appears to have been found.
http://www.phpmemx.net/~unrealir/forums/viewtopic.php?t=2056&start=0

Judging from this, it appears the problem lies with changes made from openssl-0.9.7d and openssl-0.9.7e.

If any more information needs to be retrieved, let me know, and I'll get right onto it.

---Ralish---
Steps To ReproduceTry and link two UnrealIRCd's together with SSL Support in the Link.
Additional InformationServer 1 relevant unrealircd.conf entries:
LISTEN BLOCK:
listen *:65144 {
    options { serversonly; ssl; };
};
link tpr.massive.net {
    username *;
    hostname x.x.x.x;
    bind-ip *;
    port 65144;
    hub *.massive.net;
    password-connect "passhere";
    password-receive "passhere";
    class servers;
    compression-level 9;
    options { ssl; zip; nodnscache; nohostcheck; };
};

Server 2 relevant unrealircd.conf entries:
listen *:65144 {
    options { serversonly; ssl; };
};
link pnc.massive.net {
    username *;
    hostname x.x.x.x;
    bind-ip *;
    port 65144;
    hub *.massive.net;
    password-connect "passhere";
    password-receive "passhere";
    class servers;
    compression-level 9;
    options { ssl; zip; autoconnect; nodnscache; nohostcheck; };
};
3rd party modulesNONE

Activities

Ralish

2005-06-08 02:55

reporter   ~0010068

And yes, I know this looks suspiciously like a forum post, but everything seems to point to a bug in UnrealIRCd, an incompatibility between openssl0.9.7d and openssl0.9.7e and later.

Furthermore, it might be useful to know SSL Clients can still connect, just SSL Servers can not Link.

syzop

2005-10-09 15:52

administrator   ~0010561

Just to let you know I linked a server with 0.9.7a and 0.9.7e just fine here (both Linux, Debian).

syzop

2005-10-09 17:04

administrator   ~0010562

0.9.6g (FBSD 4.7) <-> 0.9.7e (win32) works as well
and
0.9.7d (Linux, Debian) <-> 0.9.7e (win32) too

All 3 configurations were tried in both directions.


Are you still experiencing this problem?

Actually... are you able to reproduce this problem with the official win32 build from unrealircd.com ?

Stealth

2005-10-09 19:38

reporter   ~0010563

Also, try using a more standard port, such as 6697, 6668, 6669, 7000, etc.

aquanight

2005-10-09 20:06

reporter   ~0010564

syzop: on the other hand, would using an obscure port not potentially contribute to security (although security is already practically a nonissue since SSL is involved)?

aquanight

2005-10-09 20:09

reporter   ~0010565

(And for the record the forum link is now: http://forums.unrealircd.com/viewtopic.php?t=2056 (the phpmemx.net link doesn't work anymore).)

OpenBSD

2005-10-10 14:35

reporter   ~0010574

Sorry for my english ;)

Check set::ssl::options... try to remove verify-certificate and no-self-signed :)

RandomNumber

2005-10-17 12:44

reporter   ~0010592

Or is this just a windows issue? Since you all tested on nix and hes using windows

syzop

2005-10-17 13:49

administrator   ~0010597

Uhm, win32 = windows.
Quoting myself:
[quote] 0.9.6g (FBSD 4.7) <-> 0.9.7e (win32) works as well
and
0.9.7d (Linux, Debian) <-> 0.9.7e (win32) too[/quote]

Anyway, if the original reporter (or anyone else who can reproduce this) is not going to respond in a few days, I'm going to close this.

Issue History

Date Modified Username Field Change
2005-06-08 02:50 Ralish New Issue
2005-06-08 02:50 Ralish 3rd party modules => NONE
2005-06-08 02:55 Ralish Note Added: 0010068
2005-10-09 15:52 syzop Note Added: 0010561
2005-10-09 17:04 syzop Note Added: 0010562
2005-10-09 19:38 Stealth Note Added: 0010563
2005-10-09 20:06 aquanight Note Added: 0010564
2005-10-09 20:09 aquanight Note Added: 0010565
2005-10-10 14:35 OpenBSD Note Added: 0010574
2005-10-17 12:44 RandomNumber Note Added: 0010592
2005-10-17 13:49 syzop Note Added: 0010597
2005-10-22 10:13 syzop Status new => closed
2005-10-22 10:13 syzop Resolution open => unable to duplicate