InspIRCd-3.3.0 - Delujoč config za ssl/tls?

Pozdravljeni.

Zanima me, če je komu že uspelo postavit InspIRCd-3.3.0 z configom, ki omogoča enkripcijo?

Certifikati so "pravilni", ker če jih uporabim v Nginx, delajo.

Konfiguracijo berem od tu:
https://docs.inspircd.org/3/modules/ssl...


Tole je delna trenutna konfiguracija inspircd.conf:

# add module
<module name="ssl_gnutls">

# fix binding
#<bind address="127.0.0.1" port="6667" type="clients">
<bind address="1.2.3.4" port="6667" type="clients">
<bind address="1.2.3.4" port="6697" type="clients" ssl="gnutls">

# add for gnutls
<sslprofile name="clients"
            provider="gnutls"
            cafile="/var/certificates/letsencrypt-full-chain.pem"
            certfile="/var/certificates/irc.some-site.cum.pem"
            crlfile=""
            dhfile="/etc/inspircd/dhparam.pem"
            hash="sha256"
            keyfile="/var/certificates/irc.some-site.cum.key"
            mindhbits="1024"
            outrecsize="1024"
            priority="NORMAL"
            requestclientcert="no"
            strictpriority="no">

# add logging
<log method="file"
     type="*"
     level="rawio"
     target="/var/log/inspircd/inspircd.log"
     flush="1">

V log fajlu ni neke detajlne razlage, zakaj ne dela:

Wed Sep 25 2019 11:30:57 SOCKET: Error on FD 8 - 'Connection closed'
Wed Sep 25 2019 11:30:57 USERS: QuitUser: 507AAAABH=507AAAABH 'Connection closed'
Wed Sep 25 2019 11:30:57 USEROUTPUT: C[507AAAABH] O ERROR :Closing link: (507AAAABH@some-dns-pointer...) [Connection closed]
Wed Sep 25 2019 11:30:57 SOCKET: DoWrite on errored or closed socket
Wed Sep 25 2019 11:30:57 SOCKET: Remove file descriptor: 8

Če poženem:
openssl s_client -connect irc.some-server.cum:6697

Dobim:

CONNECTED(00000003)
140530471437440:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../ssl/record/ssl3_record.c:332:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 5 bytes and written 304 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---

Prav tako v log fajlu ni error-jev, da kakega fajla ne more prebrati (prej sem to imel, pa sem popravil v apparmor). V syslog-u tudi nič ni.

Connection na port 6667 dela normalno.