Using SSL Certs for Passwords

[carocho]

Hi...

I have some doubts on the fixed topic about this.

I have my unreal3.2.8.1 in a Debian server but usually i connect to it with xchat client in windows...

So, to create my .pem files, should i use the windows or the *Nix version of the tutorial?

I already have tried both but i'm getting this error when performing the "./oper mynick *" command:

* No O-lines for your host

In unrealircd.conf i have this:

Code: Select all

oper myircnick {
        class   clients;
        from {
                userhost myircnick!*@*;
        };
        password "myircnick.pem" {
                                        sslclientcert;
                                   };
        flags
        {
                can_zline;
                can_gzline;
                can_gkline;
                global;
        };
};

[Stealth]

userhost cannot contain a nickname.

[carocho]

So how do i know my userhost?

[carocho]

Is my user host, the ip of the computer that i am connecting from to my irc client?

[carocho]

My actual IP is pa1-84-91-3-222.netvisao.pt or 84.91.3.222...

Is any of these my host?

[Stealth]

If you're using certs for passwords it's perfectly safe to use *@*, especially since if someone got your cert you have bigger problems to deal with.

From the manual:

The oper::from::userhost is a user@host mask that the user must match, you can specify more than one hostmask by creating more than one oper::from::userhost.

[carocho]

If you're using certs for passwords it's perfectly safe to use *@*, especially since if someone got your cert you have bigger problems to deal with.

From the manual:

The oper::from::userhost is a user@host mask that the user must match, you can specify more than one hostmask by creating more than one oper::from::userhost.

My difficulty is to identify my userhost... If it can't contain a nick, if is not my IP, if it is not this pa1-84-91-3-222.netvisao.pt, so i can't figure out what it could be...

Anyway, if you say it's pretty safe to use *@* if i use certs, so i don't understand the last part of your statment that i've underlined and bolded...

Can you say it in other words?

[carocho]

If you're using certs for passwords it's perfectly safe to use *@*, especially since if someone got your cert you have bigger problems to deal with.

From the manual:

The oper::from::userhost is a user@host mask that the user must match, you can specify more than one hostmask by creating more than one oper::from::userhost.

My difficulty is to identify my userhost... If it can't contain a nick, if is not my IP, if it is not this pa1-84-91-3-222.netvisao.pt, so i can't figure out what it could be...

Anyway, if you say it's pretty safe to use *@* if i use certs, so i don't understand the last part of your statment that i've underlined and bolded...

Can you say it in other words?

Further i got this error creating my certs under Windows...

[Stealth]

Anyway, if you say it's pretty safe to use *@* if i use certs, so i don't understand the last part of your statment that i've underlined and bolded...

Your certificate is your identity and should be kept secret. If someone gets your certificate they become you.

My difficulty is to identify my userhost... If it can't contain a nick, if is not my IP, if it is not this pa1-84-91-3-222.netvisao.pt, so i can't figure out what it could be...

If you have ever used IRC you would know what your user@host is. It is what the server sees you as when you WHOIS yourself.

Further i got this error creating my certs under Windows...

If you are having difficulty generating your cert, use my online certificate generator at https://unreal.x-tab.org/cert.php


Lastly, running an IRC server requires knowledge of how IRC works and IRC terminology. You are demonstrating that you do not know either of those items. Perhaps you should create a channel for your needs on a small network rather than trying to create a server yourself, or find someone who knows how to create and run a server to do this for you.

[carocho]

...

My difficulty is to identify my userhost... If it can't contain a nick, if is not my IP, if it is not this pa1-84-91-3-222.netvisao.pt, so i can't figure out what it could be...

If you have ever used IRC you would know what your user@host is. It is what the server sees you as when you WHOIS yourself.

I use irc for sometime...

When i whois myself i get this:

Code: Select all

([email protected]): Utilizador
*@pa1-84-91-3-222.netvisao.pt 84.91.3.222

So wich one is my userhost???

Anyone that what to start, gotta start from somewhere...
I have some basic concepts but obviously not enough to create a network all by my self, and i'm interested in learning...

So i have to make some questions...

[katsklaw]

You're right, we all have to start somewhere. However, its logical to start at the beginning, no 75% of the way in. The beginning is as a user in a channel until you learn a few things. Then as a Channel operator, then ircop, then admin.

You are trying to start at admin which doesn't work well. There are 37573928575 other things you need to know first.

You may know a few things, but you still dont know enough to be a channel operator much less an admin. Stealth and I have years and years of experience, we know what we are talking about and know what skills you are lacking.

It is normal for you to ask questions while.you learn, it's also normal for you to know what a hostmask is at the time you start learning about server administration. Irc server setup is an advanced task, not a novice task.

I'm not saying you shouldn't learn, I'm saying you need yo learn irc first. Right now you are trying to build a house on mud and the blueprints are in a language you can't read.

[carocho]

katsklaw, i really appreciate your comment/advice...

I'll follow part of it but i just can't follow everything... I'm OP in one channel but i don't think i can ever become an ircop in any irc. So i've just to read a lot, test, ask, get mad, get frustrated, get a small win, get furious, get mad, then get an average win and keep going 'till i get what i want...

I've been using Linux for about 2 years and a half and i know that there is yet a lot to learn about linux. As matter a fact i don't know "nothing" about Linux but i'm already capable of seting up a server to use rtorrent/rutorren, an webadmin interface, an FTP server, an SSH server, VNC server.

I didn't know Linux at all but i've started from somewhere (0) and with a lot of reading, asking and frustration, i can say that a know only the basics.
This afternoon i was search google for some nice explanation about file/dir permissions... Today something else got into my head about linux... I finally understood permissions (777, 755, 644, 600) and so on...
This was a small victory...

About a year ago i started to learn how to set up an eggdrop... Today i have a basic bot that is able to interact with users via TCL scripts... :p

Well, i'm going to read a bit more...