open
https://gitlab.synchro.net/main/sbbs/-/issues/881
In general, it seems that any time I hear about self-signed certificates, it's because they got generated and clobbered what the SysOp actually wanted. I can think of a few options...
1. Have a configuration option to allow it. This option could be set in the default configs and documented to be disabled when "something else" is used.
2. Remove it and have a script that can generated one on demand, document its use and disable TLS/SSH by default.
The reading of the current cert would then need a retry/backoff mechanism of some sort and useful error messages.
--- SBBSecho 3.23-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)