adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-10-31 01:32:02 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity

znc 1.6.1 unable to connect to ssl server with signed cert: Disconnected from IRC (error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure). #572

New Issue
Closed
opened 2026-10-05 04:30:40 +02:00 by adam · 10 comments
adam commented 2026-10-05 04:30:40 +02:00
Owner
Copy link
Copy source

whenever i update znc to 1.6, it stops being able to connect to ssl servers

example on my own irc network: gorf.chat +6697

<_status> Disconnected from IRC (error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure). Reconnecting...
<_status> Disconnected from IRC. Reconnecting...
<_status> Disconnected from IRC (error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure). Reconnecting...
<_status> Disconnected from IRC. Reconnecting...

its able to connect without ssl on port 6667. all other clients are able to connect with ssl on port 6697

whenever i update znc to 1.6, it stops being able to connect to ssl servers example on my own irc network: gorf.chat +6697 <_status> Disconnected from IRC (error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure). Reconnecting... <_status> Disconnected from IRC. Reconnecting... <_status> Disconnected from IRC (error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure). Reconnecting... <_status> Disconnected from IRC. Reconnecting... its able to connect without ssl on port 6667. all other clients are able to connect with ssl on port 6697 <!-- github-sync-id:105991642 -->
adam closed this issue 2026-10-05 04:30:40 +02:00
adam commented 2026-10-05 04:30:41 +02:00
Author
Owner
Copy link
Copy source

I thought at first that your server is SSLv3-only, but apparently it also has TLSv1.1 and TLSv1.2. You might want to consider disabling SSLv3, but it's not the issue here.

@KindOne- at IRC suggested that this could be potential duplicate of https://github.com/znc/znc/issues/829. What happens if you telnet to that port?

I thought at first that your server is SSLv3-only, but apparently it also has TLSv1.1 and TLSv1.2. You might want to consider disabling SSLv3, but it's not the issue here. @KindOne- at IRC suggested that this could be potential duplicate of https://github.com/znc/znc/issues/829. What happens if you telnet to that port? <!-- github-comment-id:139521260 -->
adam commented 2026-10-05 04:30:41 +02:00
Author
Owner
Copy link
Copy source

its working now and im not sure what i did to fix it.
@KindOne- told me to 'znc -D'

before doing so, i edited my znc.conf and removed
"TrustedServerFingerprint = ac:3f:59:26:6f:f6:3d:1b:87:2f:01:7f:10:9e:52:f0:43:d0:23:c1:8c:9b:89:98:3f:47:71:24:19:41:1e:98"
from my network, thinking that maybe a wrong fingerprint was causing the issue.

then znc -D told me to delete lines from my conf:
URIPrefix = /
ClientEncoding = UTF-8
MaxQueryBuffers = 50
AutoClearQueryBuffer = false
HideVersion = true
(not sure why it didnt complain about those config lines when starting znc without -D)

and now its suddenly working. i re-added the TrustedServerFingerprint line and restarted znc to see if that was the issue, but its working fine with that line too, so im not exactly which part fixed the problem

its working now and im not sure what i did to fix it. @KindOne- told me to 'znc -D' before doing so, i edited my znc.conf and removed "TrustedServerFingerprint = ac:3f:59:26:6f:f6:3d:1b:87:2f:01:7f:10:9e:52:f0:43:d0:23:c1:8c:9b:89:98:3f:47:71:24:19:41:1e:98" from my network, thinking that maybe a wrong fingerprint was causing the issue. then znc -D told me to delete lines from my conf: URIPrefix = / ClientEncoding = UTF-8 MaxQueryBuffers = 50 AutoClearQueryBuffer = false HideVersion = true (not sure why it didnt complain about those config lines when starting znc without -D) and now its suddenly working. i re-added the TrustedServerFingerprint line and restarted znc to see if that was the issue, but its working fine with that line too, so im not exactly which part fixed the problem <!-- github-comment-id:139521487 -->
adam commented 2026-10-05 04:30:42 +02:00
Author
Owner
Copy link
Copy source

ok we've discovered that i have 2 zncs installed. my packaged znc is 1.4 in /usr/bin/znc and the 1.6.1 i compiled is in /usr/local/bin/znc. will remove 1.4 and report back

ok we've discovered that i have 2 zncs installed. my packaged znc is 1.4 in /usr/bin/znc and the 1.6.1 i compiled is in /usr/local/bin/znc. will remove 1.4 and report back <!-- github-comment-id:139524329 -->
adam commented 2026-10-05 04:30:43 +02:00
Author
Owner
Copy link
Copy source

alright we're back at the beginning again.

znc 1.6 seems to be working on some other ssl servers. but not mine.
my cert was generated with 'openssl req -nodes -x509 -newkey rsa:4096 -sha256' and it has been signed by wosign.
Package ca-certificates-2015.2.4-65.0.1.el6_6.noarch already installed and latest version
my server is able to curl https://gorf.chat/ . my cert is fine but my znc doesnt like it? its working for @KindOne- on znc 1.7.x

alright we're back at the beginning again. znc 1.6 seems to be working on some other ssl servers. but not mine. my cert was generated with 'openssl req -nodes -x509 -newkey rsa:4096 -sha256' and it has been signed by wosign. Package ca-certificates-2015.2.4-65.0.1.el6_6.noarch already installed and latest version my server is able to curl https://gorf.chat/ . my cert is fine but my znc doesnt like it? its working for @KindOne- on znc 1.7.x <!-- github-comment-id:139526672 -->
adam commented 2026-10-05 04:30:43 +02:00
Author
Owner
Copy link
Copy source

if it helps, i compiled znc 1.6.1 from http://znc.in/releases/znc-latest.tar.gz on centos 6. i also had to install centos devtools 1.1 to get access to gcc 4.7 to compile znc

if it helps, i compiled znc 1.6.1 from http://znc.in/releases/znc-latest.tar.gz on centos 6. i also had to install centos devtools 1.1 to get access to gcc 4.7 to compile znc <!-- github-comment-id:139528856 -->
adam commented 2026-10-05 04:30:44 +02:00
Author
Owner
Copy link
Copy source

This issue is probably caused by that 1.4 as ZNC shouldn't want to remove those lines from config file.

This issue is probably caused by that 1.4 as ZNC shouldn't want to remove those lines from config file. <!-- github-comment-id:139529305 -->
adam commented 2026-10-05 04:30:45 +02:00
Author
Owner
Copy link
Copy source

ive removed 1.4 and re-added those lines. those were seperate issues

ive removed 1.4 and re-added those lines. those were seperate issues <!-- github-comment-id:139529918 -->
adam commented 2026-10-05 04:30:45 +02:00
Author
Owner
Copy link
Copy source

[2015-09-11 22:10:30.329480] ConnectQueueTimer done
[2015-09-11 22:10:30.555754] TDNS: IRC::brr::gorf, connecting to [209.141.38.133] using bindhost []
[2015-09-11 22:10:30.635714] IRC::brr::gorf == Connected()
2015-09-11 22:10:30.635781 ZNC -> IRC [CAP LS]
2015-09-11 22:10:30.635875 ZNC -> IRC [NICK lyrebosyrhC]
2015-09-11 22:10:30.635925 ZNC -> IRC [USER lamentat "lamentat" "lamentat" :Peter Fischer]
[2015-09-11 22:10:30.713401] src/Csocket.cpp:602 at src/Csocket.cpp:3325
[2015-09-11 22:10:30.713466] src/Csocket.cpp:607 error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
[2015-09-11 22:10:30.713484] IRC::brr::gorf == SockError(0 error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure)
2015-09-11 22:10:30.713506 ZNC -> CLI [:*status!znc@znc.in PRIVMSG lawltrein[eee] :Disconnected from IRC (error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure). Reconnecting...]

im also having trouble connecting to localhost which doesnt have any special cert.
[2015-09-11 22:09:19.699615] TDNS: initiating resolving of [127.0.0.1] and bindhost [127.0.0.1]
[2015-09-11 22:09:19.699677] ConnectQueueTimer done
[2015-09-11 22:09:19.700758] TDNS: IRC::brr::gorf, connecting to [127.0.0.1] using bindhost [127.0.0.1]
[2015-09-11 22:09:19.723764] IRC::brr::gorf == SockError(103 Software caused connection abort)
2015-09-11 22:09:19.723811 ZNC -> CLI [:*status!znc@znc.in PRIVMSG lawltrein[eee] :Disconnected from IRC (Software caused connection abort). Reconnecting...]

[2015-09-11 22:10:30.329480] ConnectQueueTimer done [2015-09-11 22:10:30.555754] TDNS: IRC::brr::gorf, connecting to [209.141.38.133] using bindhost [] [2015-09-11 22:10:30.635714] IRC::brr::gorf == Connected() [2015-09-11 22:10:30.635781](brr/gorf) ZNC -> IRC [CAP LS] [2015-09-11 22:10:30.635875](brr/gorf) ZNC -> IRC [NICK lyrebosyrhC] [2015-09-11 22:10:30.635925](brr/gorf) ZNC -> IRC [USER lamentat "lamentat" "lamentat" :Peter Fischer] [2015-09-11 22:10:30.713401] src/Csocket.cpp:602 at src/Csocket.cpp:3325 [2015-09-11 22:10:30.713466] src/Csocket.cpp:607 error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure [2015-09-11 22:10:30.713484] IRC::brr::gorf == SockError(0 error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure) [2015-09-11 22:10:30.713506](brr/gorf) ZNC -> CLI [:*status!znc@znc.in PRIVMSG lawltrein[eee] :Disconnected from IRC (error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure). Reconnecting...] im also having trouble connecting to localhost which doesnt have any special cert. [2015-09-11 22:09:19.699615] TDNS: initiating resolving of [127.0.0.1] and bindhost [127.0.0.1] [2015-09-11 22:09:19.699677] ConnectQueueTimer done [2015-09-11 22:09:19.700758] TDNS: IRC::brr::gorf, connecting to [127.0.0.1] using bindhost [127.0.0.1] [2015-09-11 22:09:19.723764] IRC::brr::gorf == SockError(103 Software caused connection abort) [2015-09-11 22:09:19.723811](brr/gorf) ZNC -> CLI [:*status!znc@znc.in PRIVMSG lawltrein[eee] :Disconnected from IRC (Software caused connection abort). Reconnecting...] <!-- github-comment-id:139530625 -->
adam commented 2026-10-05 04:30:46 +02:00
Author
Owner
Copy link
Copy source

seems like its all ssl servers now

seems like its all ssl servers now <!-- github-comment-id:139531008 -->
adam commented 2026-10-05 04:30:47 +02:00
Author
Owner
Copy link
Copy source

i fixed it by deleting ~/.znc/moddata/ and ~/.znc/users/
no idea why that was causing problems for ssl

i fixed it by deleting ~/.znc/moddata/ and ~/.znc/users/ no idea why that was causing problems for ssl <!-- github-comment-id:139564038 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#572