bahamut icon indicating copy to clipboard operation
bahamut copied to clipboard

Handling of KLINE and AKILL errors when connecting with SSL

Open rscs opened this issue 4 years ago • 0 comments

If a user is affected by a KLINE or AKILL and tries to connect with SSL, we don't always show them the ban reason because the connection is closed by bahamut before the SSL handshake finishes. For example, a user whose IP is on one of the RBLs recently saw this in their mIRC status window, leading us to believe his client was misconfigured when really his IP was KLINEd.

* Connect retry #1 irc.dal.net (+6697)
-
* Unable to connect to server (SSL wrong version number)
-
* Connect retry #2 irc.dal.net (+6697) (dns pool)
-
* Unable to connect to server (SSL wrong version number)
- 

Let's see if there's a way to complete the handshake before aggressively closing the connection.

rscs avatar Nov 25 '20 17:11 rscs