Bug #1728
Core launched with --require-ssl flag, but no certificate to load, will accept plaintext connections
0%
Description
Cores launched with the "--require-ssl" flag, (introduced in https://github.com/quassel/quassel/pull/43) will reject clients that do not accept SSL.
However, if the core itself does not have an SSL certificate available to load, the core will still launch, and happily accept plaintext connections.
This is an unexpected situation.
Steps to reproduce:
- Install Quasselcore by whatever means you wish
- Configure Quasselcore's data directory with no quasselCert.pem file
- Launch Quasselcore with the "--require-ssl" flag on the command line
Expected results:
Quasselcore will not launch, because the core could not find an SSL certificate.
Actual results
Quasselcore launches, and accepts plaintext client connections.
Related issues
History
#1 Updated by phuzion over 5 years ago
PR submitted to fix this.
#2 Updated by phuzion over 5 years ago
- Related to Feature #1323: It doesn't seem to be possible to disable SSLv3. added
#3 Updated by phuzion over 5 years ago
- Priority changed from Normal to High
#4 Updated by phuzion over 5 years ago
- Status changed from New to Resolved
PR 581 has been merged, resolving this bug.
#5 Updated by amorapotter 7 months ago
Unblocked Games guarantees that players may continue to enjoy their favorite games on banned networks without the need for downloads or special permissions, and many users select Cool Games Free websites because they provide quick gaming.
#6 Updated by bevisjame about 1 month ago
That definitely sounds like a security edge case worth fixing. The core should fail clearly when SSL is required but no certificate is available. It’s a bit like stickman hook — missing one crucial setup can make the whole run go in the wrong direction.
#7 Updated by Frank886 15 days ago
Sometimes all you need is a fun game to turn a boring moment into something exciting. I love exploring different [[https://onlinegamesaz.io online games]] because each one brings a new challenge, from fast action to relaxing puzzles. It is an easy way to enjoy a few free minutes and always find something interesting to play.
#8 Updated by hena32 15 days ago
I've faced similar SSL issues when setting up my own IRC server, and it can be so frustrating! It's a reminder of the importance of proper configuration. Have you found any effective workarounds for this problem? It reminds me a little of https://fnaf1game.io/ too sometimes the smallest details can make a big difference!
#9 Updated by bewofil793 7 days ago
If you're interested in ancient astrological cultures, you should definitely check out this website
planetary hours