hashbang / docker-unrealircd Goto Github PK

I understand that if log in using the #!hashbang shell the only IP address that is available via whois is that of the hashang server. I've noticed a lot that people connect from outside shell (not sure why), and this results in a minor leak of ISP info. I understand this is not that major, or at least I don't believe it to be, since it don't show as much info as places such as freenode.

But this got me to thinking. Since HostServ is available, if this is the right thing needed for cloaks. I propose to use it. My thought here is not to create some kind of ranking in place (if that is even the right choice of word), but to assign everyone a cloak based on level of contribution and if possible, have this vhost/cloak assigned automatically at account creation as most users may not request one.

I was thinking along the lines of

hashbang/admins
hashbang/user
hashbang/contributers

or something like that, so I guess it would be a group cloack. With hashbang/user being the default for new users/current non-contributors. Thoughts?

There are several reasons we want that:

• this reduces the amount of pain when renewing the GlobalSign cert;
• this avoids having to give the IRCd the private key used by much more sensitive services (LDAP, signup API, ...).

Right now, we are fetching a random tarball off the Internet and running with it.
UnrealIRCd 4.x releases are GPG-signed, we should use that.

We are currently using the 3.x series, whose security support ends in December.

The IRCd supports neither traditional SSL certificates (for authentication for services) nor the SASL EXTERNAL authentication mechanism.

Has anyone successfully used this with SSL?

I get the following error when connecting to an SSL enabled port.

Connection failed ((336031996) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol)

I have tried this on 3.2.10.4 & 3.2.10.5, both with self signed certs and legitimate certs all responding with the same error.

Even openssl returns the same error.

openssl s_client -showcerts -connect localhost:6697