open
https://gitlab.synchro.net/main/sbbs/-/issues/881
In general, it seems that any time I hear about self-signed certificates, it's because they got generated and clobbered what the SysOp actually wanted. I can think of a few options...
1. Have a configuration option to allow it. This option could be set in the default configs and documented to be disabled when "something else" is used.
2. Remove it and have a script that can generated one on demand, document its use and disable TLS/SSH by default.
The reading of the current cert would then need a retry/backoff mechanism of some sort and useful error messages.
---
■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net