Actions
Bug #233
closed
Bug #232: [STICKY] Annoying bugs in softwares used by DC
ratbox-ircd: secure S2S support is broken
Status:
Rejected
Priority:
Normal
Assignee:
-
Category:
Service :: Communication
Start date:
2011-06-22
Due date:
% Done:
0%
Estimated time:
Patch Available:
No
Confirmed:
No
Branch:
Entity:
DuckCorp
Security:
Yes
Help Needed:
No
Description
Linking two irc-ratbox servers fails for an unknown reason. There is no crash but an unclear error in the log. Upstream author was contacted about it on the ML but they said GNUTLS support, which is used in the Debian package for licensing reasons, is not well tested and OpenSSL works well. They do not care much about it. We need to get it working using GNUTLS.
Beware, during preliminary investigation, another bug was found, leading to password leak over the network during the link attempt. A patch was made and included in the Debian package. When this issue is fixed, both patches needs to be submitted upstream.
Updated by
Actions