I have a small server running Ubuntu 12.04 LTS. On it I wanted to set up IRC with SSL support. it appears that ircd-hybrid is most popular. I am not married to using it so other options are welcome. However, I am not seeing other options.
I have installed using apt-get. That isn't the problem. The problem is that the apt-get install version doesn't enable SSL. Try connecting to the SSL port 6697 using SSL and it will not work. Hence the work to build it myself. If you actually follow the source of the ircd-hybrid package the configuration requires that you edit it and add the "USE_OPENSSL = 1" option.
Because hybrid doesn’t support OpenSSL by default, you have to do a manual patch to get it working.
Anyway, I followed the instructions (I listed a couple at the end) and install ircd-hybrid no problem. It's actually running now. However, I noticed that SSL isn't working. The port is never being listened to. Digging deeper, I look back at the building process and notice that OpenSSL isn't being included.
So I have been trying to build and just to clarify, here is the ./configure output:
Compiling ircd-hybrid 7.2.2 Installing into: /usr Ziplinks ................ yes **OpenSSL ................. no** Modules ................. shared IPv6 support ............ yes Net I/O implementation .. sigio EFnet server ............ no (use example.conf) Halfops support ......... yes Small network ........... no G-Line voting ........... yes
A few line up in the output of the ./configure script I notice that it seems that all the encryption algos are unavailable!
checking for OpenSSL... /usr checking for OpenSSL 0.9.6 or above... found checking for RSA_free in -lcrypto... yes checking for EVP_bf_cfb... no checking for EVP_cast5_cfb... no checking for EVP_idea_cfb... no checking for EVP_rc5_32_12_16_cfb... no checking for EVP_des_ede3_cfb... no checking for EVP_des_cfb... no
Which if you look into the configure script you'll see that at least one of the encryption libraries need to be enabled. This is a hunch as I am not entirely positive about this. It seems that OpenSSL has disabled RC5 and a couple other algos.
I've rebuilt and installed OpenSSL with the enable-rc5 and other flags but no dice.
This is on Ubuntu 12.04. Help? Anyone? I'd like to enable SSL on IRC on my personal server. It doesn't have to be ircd-hybrid.
EDIT I have been chatting with the fella that figured out the solution on the first link I posted above. He was able to successfully build and run with SSL on a clean 12.04 install using the default OpenSSL package and the patched pircd-hybrid package. The system I am on was originally built using 10.x. I wonder if doing those upgrades to 12.04 LTS somehow broke something along the way. For example, his running of the ircd-hybrid configuration yields these in the crypto part of the setup:
checking for OpenSSL... /usr checking for OpenSSL 0.9.6 or above... found checking for RSA_free in -lcrypto... yes checking for EVP_bf_cfb... yes checking for EVP_cast5_cfb... yes checking for EVP_idea_cfb... no checking for EVP_rc5_32_12_16_cfb... no checking for EVP_des_ede3_cfb... yes checking for EVP_des_cfb... yes
I am running the latest open ssl:
$ openssl version OpenSSL 1.0.1 14 Mar 2012
Not sure why the configure script isn't seeing those cipher algos.
EDIT 2: Just installed a VM on my ESXi box. Brand new 32-bit install 12.04 LTS. Same problem. Installs fine via apt-get but SSL is not enabled. Tried the patch and it is also missing the algos as I listed above.