View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0004061 | unreal | ircd | public | 2011-12-18 06:49 | 2011-12-21 10:36 |
| Reporter | warg | Assigned To | syzop | ||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | closed | Resolution | unable to duplicate | ||
| Product Version | 3.2.9 | ||||
| Summary | 0004061: STARTTLS is not working. | ||||
| Description | STARTTLS is not working. | ||||
| Steps To Reproduce | Run UnrealIRCd 3.2.9 w/ SSL support. Load necessary modules. Configure IRC client for STARTTLS (I only know of KVIRC's support of STARTTLS, so that is what I used for this). Try connecting with STARTTLS support. You will not obtain a secure connection. | ||||
| Additional Information | I was able to use STARTTLS on other networks that support STARTTLS. My minimal unrealircd.conf and config.log is attached. | ||||
| Attached Files | unrealircd.conf (481 bytes) config.log (99,583 bytes) kvirc.png (284,650 bytes) | ||||
| 3rd party modules | |||||
|
|
So this is exactly what the problem is: STARTTLS command does work, however UnrealIRCd hasn't implemented a way to tell the client before registration that it supports STARTTLS, thus existing IRC clients (ex: KVIRC) that support STARTTLS will not try to use it. I'm all for a CAP feature. |
|
|
Added as a child to 0003915 (3.2.10 TODO), since this should really be fixed. Perhaps someone can write a simple module to send the required announcement to clients? |
|
|
I've suggested CAPAB before, perhaps another reason for it? ;) In the interim, can this be a 005 thing? |
|
|
It cannot be a 005 thing because STARTTLS must happen before registration. |
|
|
I cannot reproduce the issue, I use kvirc 4 like I tested after I implemented STARTTLS, and when I go to advanced -> connection, and tick the box 'supports STARTTLS protocol', I can get on IRC with TLS using STARTTLS. If you want some automated method without having to tick a box, which is not what you wrote in the report, then that's something for - for example - CAPAB... since no client seems to just 'attempt' the STARTTLS. CAPAB is already requested by katsklaw in 0004018. If you&others have additional reasons for implementing CAPAB then I suggest to add it there as it would make it more probable to get the feature implemented ;) |
|
|
Cronus informed me that he couldn't find the option in KVIrc 4.0.4 (my screenshot attached to this bug report was from a pre-4.0.0 version). Apparently the option was removed later on. Cronus was kind enough to ask the KVIrc guys about this, which resulted in re-addeding it, see http://svn.kvirc.de/kvirc/changeset/5997 For reference, the KVIrc I used for testing is at http://www.vulnscan.org/tmp/KVIrc-4.0.0-rc1-r3472.exe STARTTLS has two advantages in my opinion: 1) A user can just check box to use TLS, and no longer has to figure out which port to use (which is useful, since there isn't a standard port) 2) It's possible, without explicit user intervention, to automatically use TLS when available We provide 1, and actually we provide 2 as well. I don't know if in latest KVIrc release it always attempts 2, but of course such default settings are up to the client coder (and possible end-user) :) Anyway, enough about KVIrc, as said please use existing bugid 0004018 for CAPAB support. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2011-12-18 06:49 | warg | New Issue | |
| 2011-12-18 06:49 | warg | File Added: unrealircd.conf | |
| 2011-12-18 06:50 | warg | File Added: config.log | |
| 2011-12-18 19:42 | warg | Note Added: 0016812 | |
| 2011-12-18 20:02 | warg | Note Edited: 0016812 | |
| 2011-12-18 20:03 | Stealth | Status | new => acknowledged |
| 2011-12-18 20:04 | Stealth | Relationship added | child of 0003915 |
| 2011-12-18 20:05 | Stealth | Note Added: 0016813 | |
| 2011-12-18 20:15 | katsklaw | Note Added: 0016814 | |
| 2011-12-19 01:36 | warg | Note Added: 0016815 | |
| 2011-12-19 19:13 | syzop | Relationship deleted | child of 0003915 |
| 2011-12-19 19:19 | syzop | Note Added: 0016816 | |
| 2011-12-19 19:19 | syzop | Status | acknowledged => closed |
| 2011-12-19 19:19 | syzop | Assigned To | => syzop |
| 2011-12-19 19:19 | syzop | Resolution | open => unable to duplicate |
| 2011-12-20 21:10 | syzop | File Added: kvirc.png | |
| 2011-12-21 10:36 | syzop | Note Added: 0016822 |
