From 0171de7653dbc409f8a936e80a8c9bc3ab3d1bdb Mon Sep 17 00:00:00 2001 From: Andreas Kotes Date: Wed, 16 Apr 2014 15:20:49 +0200 Subject: version 0.19 * fixed version string display * failing on SSL verify failures * removed ignssl option * reenabled ciphers options * added verifyssl option (cert verify depth) --- vchat-howto | 14 +++++--------- 1 file changed, 5 insertions(+), 9 deletions(-) (limited to 'vchat-howto') diff --git a/vchat-howto b/vchat-howto index 0ace213..27f8e14 100755 --- a/vchat-howto +++ b/vchat-howto @@ -69,11 +69,7 @@ type: $ echo host=vchat.berlin.ccc.de >> ~/.vchat/config -If you want to ignore SSL-warnings due to missing CA-files, type: - -$ echo ignssl=1 >> ~/.vchat/config - -If you don't want to ignore SSL-warnings, get the root-certificates from: +You don't want to ignore SSL-warnings, get the root-certificates from: http://www.cacert.org/certs/class3.txt and @@ -87,10 +83,10 @@ and copy them into your openssl-certs directory. For example: # ln -s root.txt `openssl x509 -in root.txt -hash | head -n 1`.0 # ln -s class3.txt `openssl x509 -in class3.txt -hash | head -n 1`.0 -Now you can type: - - $ echo ignssl=0 >> ~/.vchat/config - +NOTE: some openssl versions deliberately disable EC for unknown reasons, you +need to manually (re)set the cipher string to a lower security variant there: + +$ echo ciphers=DHE-RSA-AES256-SHA >> ~/.vchat/config If you want a seperate private message window, type: -- cgit v1.2.3