about summary refs log tree commit diff
diff options
context:
space:
mode:
authorAlexander Barton <alex@barton.de>2024-01-11 14:24:22 +0100
committerAlexander Barton <alex@barton.de>2024-03-23 20:23:29 +0100
commit6b27eabf5bdbc6bf6f71d7b1e7d059dfeab6849b (patch)
tree534c1186182e5963c40b0554e7828f9af11ed18e
parentb826fad15871f73435328b1d77fd364838389adb (diff)
downloadngircd-6b27eabf5bdbc6bf6f71d7b1e7d059dfeab6849b.tar.gz
ngircd-6b27eabf5bdbc6bf6f71d7b1e7d059dfeab6849b.zip
S2S-TLS: Add notice to INSTALL.md
-rw-r--r--INSTALL.md15
1 files changed, 15 insertions, 0 deletions
diff --git a/INSTALL.md b/INSTALL.md
index 544c92d4..16c7ea4b 100644
--- a/INSTALL.md
+++ b/INSTALL.md
@@ -18,6 +18,21 @@ configuration examples.
 
 ## Upgrade Information
 
+This section lists important updates and breaking changes that you should be
+aware of *before* starting the upgrade:
+
+Differences to version 26
+
+- **Attention**:
+  Starting with release 27, ngIRCd validates SSL/TLS certificates on outgoing
+  server-server links by default and drops(!) connections when the remote
+  certificate is invalid (for example self-signed, expired, not matching the
+  host name, ...). Therefore you have to make sure that all relevant
+  *certificates are valid* (or to disable certificate validation on this
+  connection using the new `SSLVerify = false` setting in the affected
+  `[Server]` block, where the remote certificate is not valid and you can not
+  fix this issue).
+
 Differences to version 25
 
 - **Attention**: