Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
biboumi
biboumi
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 98
    • Issues 98
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 12
    • Merge Requests 12
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Incidents
    • Environments
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • CI / CD
    • Repository
    • Value Stream
  • Snippets
    • Snippets
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • louiz’
  • biboumibiboumi
  • Issues
  • #3463

Closed
Open
Opened Jan 18, 2022 by poVoq@poVoq

SASL logins and WEBIRC lacks secure connection flag

Using Ergo IRCd with SASL accounts and WEBIRC enabled results in the following error (after successful SASL auth):

ERROR: You can't mix secure and insecure connections to this account

Despite the connection being over TLS and port 6697.

According to the Ergo developers this might be because of a missing "secure" flag as specified in the WEBIRC IRCv3 specs: https://ircv3.net/specs/extensions/webirc.html

secure: This flag indicates that the client has a TLS-secured connection to the gateway. Servers MUST ONLY treat the connection as secure if this flag is sent and the connection from the gateway to the server is also secure with TLS.

As a workaround disabling WEBIRC might work. Edit: confirmed, without WEBIRC it works.

Would be great if this could be added as WEBIRC support is quite useful and works great otherwise.

Edited Jan 18, 2022 by poVoq
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information
Assignee
Assign to
None
Milestone
None
Assign milestone
Time tracking
None
Due date
None
Reference: louiz/biboumi#3463