version 0.19

  * fixed version string display
  * failing on SSL verify failures
  * removed ignssl option
  * reenabled ciphers options
  * added verifyssl option (cert verify depth)

1 files changed, 5 insertions, 9 deletions

diff --git a/vchat-howto b/vchat-howto
index 0ace213..27f8e14 100755
--- a/vchat-howto
+++ b/vchat-howto
@@ -69,11 +69,7 @@ type:
 
 $ echo host=vchat.berlin.ccc.de >> ~/.vchat/config
 
-If you want to ignore SSL-warnings due to missing CA-files, type:
-
-$ echo ignssl=1 >> ~/.vchat/config
-
-If you don't want to ignore SSL-warnings, get the root-certificates from:
+You don't want to ignore SSL-warnings, get the root-certificates from:
 
    http://www.cacert.org/certs/class3.txt
    and
@@ -87,10 +83,10 @@ and copy them into your openssl-certs directory. For example:
    # ln -s root.txt `openssl x509 -in root.txt -hash | head -n 1`.0
    # ln -s class3.txt `openssl x509 -in class3.txt -hash | head -n 1`.0
 
-Now you can type:
-   
-   $ echo ignssl=0 >> ~/.vchat/config
-   
+NOTE: some openssl versions deliberately disable EC for unknown reasons, you
+need to manually (re)set the cipher string to a lower security variant there:
+
+$ echo ciphers=DHE-RSA-AES256-SHA >> ~/.vchat/config
 
 If you want a seperate private message window, type: