Core launched with --require-ssl flag, but no certificate to load, will accept plaintext connections
Cores launched with the "--require-ssl" flag, (introduced in https://github.com/quassel/quassel/pull/43) will reject clients that do not accept SSL.
However, if the core itself does not have an SSL certificate available to load, the core will still launch, and happily accept plaintext connections.
This is an unexpected situation.
Steps to reproduce:
- Install Quasselcore by whatever means you wish
- Configure Quasselcore's data directory with no quasselCert.pem file
- Launch Quasselcore with the "--require-ssl" flag on the command line
Quasselcore will not launch, because the core could not find an SSL certificate.
Quasselcore launches, and accepts plaintext client connections.
#3 Updated by phuzion about 1 month ago
- Priority changed from Normal to High