ircd-hybrid with SSL

[blindenvy]

I am having the same issue. I followed the same instructions but whenever I try and connect I get "Irssi: warning SSL handshake failed: Connection refused"

My outputs when building:

Compiling ircd-hybrid 7.2.2

Installing into: /usr
Ziplinks ................ yes
OpenSSL ................. no
Modules ................. shared
IPv6 support ............ yes
Net I/O implementation .. sigio
EFnet server ............ no (use example.conf)
Halfops support ......... yes
Small network ........... no
G-Line voting ........... yes

Configured limits:
NICKLEN ................. 15
TOPICLEN ................ 350

and

checking for usleep... yes
checking for OpenSSL... /usr
checking for OpenSSL 0.9.6 or above... found
checking for RSA_free in -lcrypto... yes
checking for EVP_bf_cfb... no
checking for EVP_cast5_cfb... no
checking for EVP_idea_cfb... no
checking for EVP_rc5_32_12_16_cfb... no
checking for EVP_des_ede3_cfb... no
checking for EVP_des_cfb... no
checking zlib.h usability... yes
checking zlib.h presence... yes

Further information:

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 12.04.1 LTS
Release: 12.04
Codename: precise

$ uname -a
Linux d6-1 3.2.0-37-generic #58-Ubuntu SMP Thu Jan 24 15:28:10 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux

I can connect no problem when not trying to use SSL. Any Ideas?

[blindenvy]

It turns out it wasn't a problem with ircd but was a problem with the client I was trying to use. When using irssi I had to supply it the port along with the -ssl option. i.e. /connect -ssl server.com 6670

[MadEgg]

Dunno if it helps anyone, but I had the same issue with no ciphers being available, and therefore, no SSL support being compiled. I fixed this by editing the configure file in the ircd-hybrid dir and look for lines l

for ac_func in EVP_bf_cfb

Basically, the term you're looking for is EVP. If you add 64 after each of these strings and then try creating the package again, it will find the available ciphers and will enable SSL support.

For example, the line above would become

for ac_func in EVP_bf_cfb64

[craiger2]

It took me a while to get it working, here's my notes:

ircd-hybrid is a mess on debian's openssl. Also it refuses to run as root, which is a challenge if you're required to use a port lower than 1024, which is typically a requirement for ssl/authentication/encryption things.

build from source and put "USE_OPENSSL = 1" in debian/rules
edit configure and configure.ac, append "64" to ssl protocols:


configure:
for ac_func in EVP_bf_cfb64 #append 64


configure.ac:
AC_CHECK_FUNCS(EVP_bf_cfb64, #append 64


edit /etc/init.d/ircd-hybrid
-u irc -c irc # change to root and root (on start and restart)


edit src/ircd.c
if (geteuid() == 0)
{
/* fprintf(stderr, "Don't run ircd as root!!!\n");
return(-1);
*/
fprintf(stderr, "Running as root.\n");
}




I hope this saves four hours for other people.