N CertFP Auth - Revision history

Nitemare: moved NickServ CertFP Auth to N CertFP Auth

2012-10-11T17:20:19Z

moved NickServ CertFP Auth to N CertFP Auth

← Older revision

Revision as of 17:20, 11 October 2012

Nitemare at 17:20, 11 October 2012

2012-10-11T17:20:06Z

← Older revision		Revision as of 17:20, 11 October 2012
Line 49:		Line 49:
	Now, make sure to connect to DareNET using SSL. To do so, use '<code>/server irc.darenet.org +6697</code>' - note the plus sign before the port number. This is what lets mIRC know you'd like to connect over SSL. To save this server with the SSL settings, you can simply add the plus sign before the port number in mIRC's server manager.		Now, make sure to connect to DareNET using SSL. To do so, use '<code>/server irc.darenet.org +6697</code>' - note the plus sign before the port number. This is what lets mIRC know you'd like to connect over SSL. To save this server with the SSL settings, you can simply add the plus sign before the port number in mIRC's server manager.

-	To continue, please scroll down to [[~~NickServ_CertFP_Auth~~#~~Adding_your_Certificate_Fingerprint_to_NickServ~~\|Adding your Certificate Fingerprint to ~~NickServ~~]].	+	To continue, please scroll down to [[N_CertFP_Auth#Adding_your_Certificate_Fingerprint_to_N\|Adding your Certificate Fingerprint to N]].

	== irssi ==		== irssi ==
Line 75:		Line 75:
	</pre>		</pre>

-	To continue, please scroll down to [[~~NickServ_CertFP_Auth~~#~~Adding_your_Certificate_Fingerprint_to_NickServ~~\|Adding your Certificate Fingerprint to ~~NickServ~~]].	+	To continue, please scroll down to [[N_CertFP_Auth#Adding_your_Certificate_Fingerprint_to_N\|Adding your Certificate Fingerprint to N]].

	=== KvIRC ===		=== KvIRC ===
Line 83:		Line 83:
	# Change your connection settings and enable the SSL option. Make sure you are using port 6697 or 9999.		# Change your connection settings and enable the SSL option. Make sure you are using port 6697 or 9999.

-	To continue, please scroll down to [[~~NickServ_CertFP_Auth~~#~~Adding_your_Certificate_Fingerprint_to_NickServ~~\|Adding your Certificate Fingerprint to ~~NickServ~~]].	+	To continue, please scroll down to [[N_CertFP_Auth#Adding_your_Certificate_Fingerprint_to_N\|Adding your Certificate Fingerprint to N]].

	=== XChat 2.8 ===		=== XChat 2.8 ===
Line 101:		Line 101:
	# Click 'Close' and then click 'Connect'.		# Click 'Close' and then click 'Connect'.

-	To continue, please scroll down to [[~~NickServ_CertFP_Auth~~#~~Adding_your_Certificate_Fingerprint_to_NickServ~~\|Adding your Certificate Fingerprint to ~~NickServ~~]].	+	To continue, please scroll down to [[N_CertFP_Auth#Adding_your_Certificate_Fingerprint_to_N\|Adding your Certificate Fingerprint to N]].

-	== Adding your Certificate Fingerprint to ~~NickServ~~ ==	+	== Adding your Certificate Fingerprint to N ==

	Now, if you did everything right, you should now be using SSL to connect to DareNET. When connecting to DareNET, you should see lines similar to the following in your status/server window. This will most likely be above the MOTD, so you may have to scroll up a bit to actually see it.		Now, if you did everything right, you should now be using SSL to connect to DareNET. When connecting to DareNET, you should see lines similar to the following in your status/server window. This will most likely be above the MOTD, so you may have to scroll up a bit to actually see it.
Line 115:		Line 115:
	YourNick SSL certificate fingerprint: 83AF6BB77B58A402CD2525D079C23FE81B8A531B643760C60B0B1F321709CC1F</pre>		YourNick SSL certificate fingerprint: 83AF6BB77B58A402CD2525D079C23FE81B8A531B643760C60B0B1F321709CC1F</pre>

-	To allow ~~NickServ~~ to automatically authenticate you based on this certificate, you need to associate the certificate fingerprint with your account. To do this issue the ADDCERT command to ~~NickServ~~ (try /msg ~~NickServ~~ HELP ADDCERT). Please note you must be authenticated to ~~NickServ~~ for this command to work.	+	To allow N to automatically authenticate you based on this certificate, you need to associate the certificate fingerprint with your account. To do this issue the ADDCERT command to N (try /msg N HELP ADDCERT). Please note you must be authenticated to N for this command to work.

-	<pre>/msg ~~NickServ~~ ADDCERT	+	<pre>/msg N ADDCERT
-	12:05 -~~NickServ~~- Certificate fingerprint 83AF6BB77B58A402CD2525D079C23FE81B8A531B643760C60B0B1F321709CC1F added.</pre>	+	12:05 -N- Certificate fingerprint 83AF6BB77B58A402CD2525D079C23FE81B8A531B643760C60B0B1F321709CC1F added.</pre>

-	~~NickServ~~ will message back saying that your CertFP was added. Now the only thing left to do is reconnect to the server to test it out. NOTE: You must connect using a nickname registered to your account in order for ~~NickServ~~ to automatically authenticate you using your certificate fingerprint; however, you may use the login-on-connect method to get around this requirement (discussed below).	+	N will message back saying that your CertFP was added. Now the only thing left to do is reconnect to the server to test it out. NOTE: You must connect using a nickname registered to your account in order for N to automatically authenticate you using your certificate fingerprint; however, you may use the login-on-connect method to get around this requirement (discussed below).

	<pre>/reconnect		<pre>/reconnect
Line 128:		Line 128:
	12:10 !irc.darenet.org Your client certificate fingerprint is: 83AF6BB77B58A402CD2525D079C23FE81B8A531B643760C60B0B1F321709CC1F		12:10 !irc.darenet.org Your client certificate fingerprint is: 83AF6BB77B58A402CD2525D079C23FE81B8A531B643760C60B0B1F321709CC1F
	...		...
-	-~~NickServ~~- You are connected using SSL and have provided a matching client certificate	+	-N- You are connected using SSL and have provided a matching client certificate
-	-~~NickServ~~- for account YourAccount. You have been automatically logged in.	+	-N- for account YourAccount. You have been automatically logged in.
-	-~~NickServ~~- Last account login: [TIME] ago at this Host/IP ([HOST]) [0 failed login attempts since last login].	+	-N- Last account login: [TIME] ago at this Host/IP ([HOST]) [0 failed login attempts since last login].
	YourAccount.user.darenet is now your hidden host</pre>		YourAccount.user.darenet is now your hidden host</pre>

Line 137:		Line 137:
	== Using Login-on-Connect with Certificiate Fingerprint ==		== Using Login-on-Connect with Certificiate Fingerprint ==

-	The login-on-connect method allows you to automatically authenticate to ~~NickServ~~ using your certificate fingerprint, but without having to use a nickname that is registered to your account.	+	The login-on-connect method allows you to automatically authenticate to N using your certificate fingerprint, but without having to use a nickname that is registered to your account.

	To set this up, you use the exact same method as described [http://www.darenet.org/support/loc here]. However, you can omit the password portion of the string. For example:		To set this up, you use the exact same method as described [http://www.darenet.org/support/loc here]. However, you can omit the password portion of the string. For example:
Line 151:		Line 151:
	== Benefits ==		== Benefits ==

-	You can now get rid of any ~~NickServ~~ AUTH scripts you have! Since you are authenticated with your certificate fingerprint you don't need them anymore. And, by using SSL your connection to the IRC server is now encrypted. Our servers also use encryption for all server<->server traffic, so if you and those you chat with both use SSL connections, the whole traffic between you and them is encrypted.	+	You can now get rid of any N AUTH scripts you have! Since you are authenticated with your certificate fingerprint you don't need them anymore. And, by using SSL your connection to the IRC server is now encrypted. Our servers also use encryption for all server<->server traffic, so if you and those you chat with both use SSL connections, the whole traffic between you and them is encrypted.

	NOTE: You can use channel mode +Z to allow only users who are connected using SSL to enter your channel.		NOTE: You can use channel mode +Z to allow only users who are connected using SSL to enter your channel.

Admin: /* Using Login-on-Connect with Certificiate Fingerprint */ Update loc link

2012-08-13T01:03:47Z

Using Login-on-Connect with Certificiate Fingerprint: Update loc link

← Older revision		Revision as of 01:03, 13 August 2012
Line 139:		Line 139:
	The login-on-connect method allows you to automatically authenticate to NickServ using your certificate fingerprint, but without having to use a nickname that is registered to your account.		The login-on-connect method allows you to automatically authenticate to NickServ using your certificate fingerprint, but without having to use a nickname that is registered to your account.

-	To set this up, you use the exact same method as described [http://www.darenet.org/~~rbl~~ here]. However, you can omit the password portion of the string. For example:	+	To set this up, you use the exact same method as described [http://www.darenet.org/support/loc here]. However, you can omit the password portion of the string. For example:

	<pre>accountname</pre>		<pre>accountname</pre>

Admin: /* Using Login-on-Connect with Certificiate Fingerprint */

2011-07-02T09:27:07Z

Using Login-on-Connect with Certificiate Fingerprint

← Older revision		Revision as of 09:27, 2 July 2011
Line 141:		Line 141:
	To set this up, you use the exact same method as described [http://www.darenet.org/rbl here]. However, you can omit the password portion of the string. For example:		To set this up, you use the exact same method as described [http://www.darenet.org/rbl here]. However, you can omit the password portion of the string. For example:

-	<pre>/accountname/</pre>	+	<pre>accountname</pre>

	rather than:		rather than:

-	<pre>/accountname/password</pre>	+	<pre>accountname:password</pre>

	The empty password portion indicates to the server that you would like to use your SSL certificate fingerprint to authenticate.		The empty password portion indicates to the server that you would like to use your SSL certificate fingerprint to authenticate.

Nitemare: /* XChat 2.8 */

2010-02-22T03:59:35Z

XChat 2.8

← Older revision		Revision as of 03:59, 22 February 2010
Line 87:		Line 87:
	=== XChat 2.8 ===		=== XChat 2.8 ===

-	~~This is known~~ to ~~work with XChat~~ 2.8~~, but not~~ previous versions!	+	'''Note''': You need to be using X-Chat 2.8.x this will '''NOT''' work with previous versions!

	First, you will need to copy the <code>yournick.pem</code> file to your <code>.xchat2</code> directory. The filename MUST be <network>.pem. So, in our case this should be <code>DareNET.pem</code>. On Windows, the directory is usually something like <code>C:\Documents and Settings\(user)\Application Data\X-Chat 2</code>.		First, you will need to copy the <code>yournick.pem</code> file to your <code>.xchat2</code> directory. The filename MUST be <network>.pem. So, in our case this should be <code>DareNET.pem</code>. On Windows, the directory is usually something like <code>C:\Documents and Settings\(user)\Application Data\X-Chat 2</code>.

Nitemare: /* XChat 2.8 */

2010-02-22T03:51:10Z

XChat 2.8

← Older revision		Revision as of 03:51, 22 February 2010
Line 97:		Line 97:
	# Go to XChat menu and select Network list.		# Go to XChat menu and select Network list.
	# Find DareNET in the list of networks and select edit.		# Find DareNET in the list of networks and select edit.
		+	# Make sure your port is set to +6697 or +9999
	# Check mark 'Use SSL for all the servers on this network' and 'Accept invalid SSL certificate'.		# Check mark 'Use SSL for all the servers on this network' and 'Accept invalid SSL certificate'.
	# Click 'Close' and then click 'Connect'.		# Click 'Close' and then click 'Connect'.

Nitemare: /* Using Login-on-Connect with Certificiate Fingerprint */

2010-02-03T05:36:47Z

Using Login-on-Connect with Certificiate Fingerprint

← Older revision		Revision as of 05:36, 3 February 2010
Line 135:		Line 135:

	== Using Login-on-Connect with Certificiate Fingerprint ==		== Using Login-on-Connect with Certificiate Fingerprint ==
-
-	~~''NOTE: This feature may not be available on all servers. We expect it to be fully deployed by Jan 31 2010.''~~

	The login-on-connect method allows you to automatically authenticate to NickServ using your certificate fingerprint, but without having to use a nickname that is registered to your account.		The login-on-connect method allows you to automatically authenticate to NickServ using your certificate fingerprint, but without having to use a nickname that is registered to your account.

Admin: /* irssi */ Don't use -ssl_verify until we actually start signing our certs with a CA

2010-01-27T21:30:16Z

irssi: Don't use -ssl_verify until we actually start signing our certs with a CA

← Older revision		Revision as of 21:30, 27 January 2010
Line 64:		Line 64:
	<pre>/server remove irc.darenet.org		<pre>/server remove irc.darenet.org
	/network add DareNET		/network add DareNET
-	/server add -auto -ssl -ssl_cert ~/.irssi/certs/yournick.pem ~~-ssl_verify~~ -network DareNET irc.darenet.org</pre>	+	/server add -auto -ssl -ssl_cert ~/.irssi/certs/yournick.pem -network DareNET irc.darenet.org</pre>

Admin: /* Using Login-on-Connect with Certificiate Fingerprint */

2010-01-26T06:26:56Z

Using Login-on-Connect with Certificiate Fingerprint

← Older revision		Revision as of 06:26, 26 January 2010
Line 135:		Line 135:

	== Using Login-on-Connect with Certificiate Fingerprint ==		== Using Login-on-Connect with Certificiate Fingerprint ==
		+
		+	''NOTE: This feature may not be available on all servers. We expect it to be fully deployed by Jan 31 2010.''

	The login-on-connect method allows you to automatically authenticate to NickServ using your certificate fingerprint, but without having to use a nickname that is registered to your account.		The login-on-connect method allows you to automatically authenticate to NickServ using your certificate fingerprint, but without having to use a nickname that is registered to your account.

Admin at 22:30, 25 January 2010

2010-01-25T22:30:36Z

← Older revision		Revision as of 22:30, 25 January 2010
Line 49:		Line 49:
	Now, make sure to connect to DareNET using SSL. To do so, use '<code>/server irc.darenet.org +6697</code>' - note the plus sign before the port number. This is what lets mIRC know you'd like to connect over SSL. To save this server with the SSL settings, you can simply add the plus sign before the port number in mIRC's server manager.		Now, make sure to connect to DareNET using SSL. To do so, use '<code>/server irc.darenet.org +6697</code>' - note the plus sign before the port number. This is what lets mIRC know you'd like to connect over SSL. To save this server with the SSL settings, you can simply add the plus sign before the port number in mIRC's server manager.

-	To continue, please scroll down to Adding your Certificate Fingerprint to NickServ.	+	To continue, please scroll down to [[NickServ_CertFP_Auth#Adding_your_Certificate_Fingerprint_to_NickServ\|Adding your Certificate Fingerprint to NickServ]].

	== irssi ==		== irssi ==
Line 75:		Line 75:
	</pre>		</pre>

-	To continue, please scroll down to Adding your Certificate Fingerprint to NickServ.	+	To continue, please scroll down to [[NickServ_CertFP_Auth#Adding_your_Certificate_Fingerprint_to_NickServ\|Adding your Certificate Fingerprint to NickServ]].

	=== KvIRC ===		=== KvIRC ===
Line 83:		Line 83:
	# Change your connection settings and enable the SSL option. Make sure you are using port 6697 or 9999.		# Change your connection settings and enable the SSL option. Make sure you are using port 6697 or 9999.

-	To continue, please scroll down to Adding your Certificate Fingerprint to NickServ.	+	To continue, please scroll down to [[NickServ_CertFP_Auth#Adding_your_Certificate_Fingerprint_to_NickServ\|Adding your Certificate Fingerprint to NickServ]].

	=== XChat 2.8 ===		=== XChat 2.8 ===