View Issue Details

IDProjectCategoryView StatusLast Update
0006047unrealircdpublic2021-12-30 12:52
Reporterarmyn Assigned Tosyzop  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionno change required 
Product Version6.0.1 
Summary0006047: Problem TLS/SSL with mIRC 7.52 and 7.55
DescriptionSince updating to Unrealircd 6.0.1.1, there are issues with mIRCs 7.52 and 7.55 not being able to connect to it even with a valid certificate.

Does this relate to Unrealircd 6.0.1.1 or mIRC?
3rd party modules

Activities

westor

2021-12-30 11:49

reporter   ~0022331

Its not UnrealIRCD problem, im 100% sure, mIRC has released a new version that fixes that bug related to certifications, update to the latest to fix that issue.

More informations: https://forums.mirc.com/ubbthreads.php/topics/269406/tls-verification-issue-on-testnet-ergo-chat#Post269406

westor

2021-12-30 11:50

reporter   ~0022332

7.67 changelog: https://www.mirc.com/versions.txt

17.Fixed SSL certificate verify failed issue relating to expired
   certificates.

syzop

2021-12-30 11:59

administrator   ~0022333

Last edited: 2021-12-30 12:00

Yeah exactly, what westor says: it's a combination of Let's encrypt root certificate expiring in Sep 2021 + mIRC having an out of date certificate list (fixed in mIRC 7.67).

armyn

2021-12-30 12:10

reporter   ~0022334

Ah yes the problem is solved by going to: File> Select server> SSL> Check "Automatic accept invalid certificate", it's good now.

armyn

2021-12-30 12:16

reporter   ~0022335

This is for mIRC games: Uno, 1000b, Hangman, it must work on an old 7.52 or 7.55 mirc. But elsewhere for my personal use I have been using the 7.67 mirc for a few months. But it is not possible to put a cross on a mirc 7.55 or 7.52

syzop

2021-12-30 12:52

administrator   ~0022336

At Let's Encrypt you also have the option to go with the "alternate chain".
If you use certbot then the option is: --preferred-chain "ISRG Root X1"
That may help with some clients, but may cause problem for others, it's a bit complicated :D
https://community.letsencrypt.org/t/long-default-and-short-alternate-certificate-chains-explained/162526

We use this chain at irc.unrealircd.org so you can test by connecting there with various clients. I expect that in practice it is mostly old android clients that won't be able to connect, but it may fix your problem for mIRC.

Anyway, as this is not an UnrealIRCd issue, I'm closing it.

Issue History

Date Modified Username Field Change
2021-12-30 11:44 armyn New Issue
2021-12-30 11:49 westor Note Added: 0022331
2021-12-30 11:50 westor Note Added: 0022332
2021-12-30 11:59 syzop Note Added: 0022333
2021-12-30 12:00 syzop Note Edited: 0022333
2021-12-30 12:10 armyn Note Added: 0022334
2021-12-30 12:16 armyn Note Added: 0022335
2021-12-30 12:52 syzop Assigned To => syzop
2021-12-30 12:52 syzop Status new => closed
2021-12-30 12:52 syzop Resolution open => no change required
2021-12-30 12:52 syzop Note Added: 0022336