in case you're planning on setting up a new FreeZone server or migrating to a new server host, make sure that your operating system of choice allows cURL to still make connections via TLS1.0.
This is by default no longer the case on at least Debian Buster (Debian 9) and Ubuntu 22.04.
If you aren't sure whether your current setup is affected, there's an easy way to check with in your freezone.log file(s).
Here's a small redacted example of the freezone.log file from an XAseco install affected by this change mentioned above:
Code: Select all
[Mon, 20 Jun 2022 14:59:15 +0200] 0 ('PUT', '/freezone/rules/LOGIN/index.json', '5')
[Mon, 20 Jun 2022 15:01:21 +0200] 0 ('GET', '/freezone/ban/status/LOGIN/index.json', '')
[Mon, 20 Jun 2022 15:01:43 +0200] 0 ('PUT', '/freezone/rules/LOGIN/index.json', '6')
[Mon, 20 Jun 2022 15:22:08 +0200] 0 ('PUT', '/freezone/rules/LOGIN/index.json', '5')
[Mon, 20 Jun 2022 15:22:13 +0200] 0 ('GET', '/freezone/ban/status/LOGIN/index.json', '')
[Mon, 20 Jun 2022 15:22:13 +0200] 0 ('PUT', '/freezone/rules/LOGIN/index.json', '6')
[Mon, 20 Jun 2022 15:30:35 +0200] 0 ('GET', '/freezone/ban/status/LOGIN/index.json', '')
The 0 usually should be a 200 if everything is working correctly and rarely any other status code.
If you find that 0 happening a lot in your FreeZone file, you need to find out how to enable TLS 1.0 in your OpenSSL config (on Linux) or follow other guides to re-enable it on Windows.
Until Nadeo changes their https://ws.trackmania.com endpoint to support modern ciphers like TLS1.2 and TLS1.3, this is currently the only known workaround to make FreeZone still work properly.
Regarding the freezone:servers manialink
The message above also applies if you have trouble connecting to the freezone:servers manialink. Even if you enable TLS1.0 in your Internet Options panel under Windows 10/11, you'll most likely be greeted with a HTTP Error 12 057, indicating that the used certificates have either expired or been revoked.
To get around this, you need to disable the two options mentioning "certificate revocation" shown at the top of this image TEMPORARILY while you need to access the manialink. Please re-enable those options after you've visited the manialink due to these options being safety features and can potentially be abused if left disabled permanently.
