ngIRCd Release 27

[ngircd.git] / INSTALL.md

diff --git a/INSTALL.md b/INSTALL.md
index faf8812e8bbf85f5cf4661363a15036d756f4374..16c7ea4b0cb176f28e44f1ae0040b365ad9ad5fa 100644 (file)
--- a/INSTALL.md
+++ b/INSTALL.md
@@ -18,6 +18,21 @@ configuration examples.
 
 ## Upgrade Information
 
+This section lists important updates and breaking changes that you should be
+aware of *before* starting the upgrade:
+
+Differences to version 26
+
+- **Attention**:
+  Starting with release 27, ngIRCd validates SSL/TLS certificates on outgoing
+  server-server links by default and drops(!) connections when the remote
+  certificate is invalid (for example self-signed, expired, not matching the
+  host name, ...). Therefore you have to make sure that all relevant
+  *certificates are valid* (or to disable certificate validation on this
+  connection using the new `SSLVerify = false` setting in the affected
+  `[Server]` block, where the remote certificate is not valid and you can not
+  fix this issue).
+
 Differences to version 25
 
 - **Attention**:
@@ -386,7 +401,7 @@ standard locations.
   - `--with-gnutls[=<path>]`
 
   Enable support for SSL/TLS using OpenSSL or GnuTLS libraries.
-  See `doc/SSL.txt` for details.
+  See `doc/SSL.md` for details.
 
 - IPv6 (autodetected by default):