Page 1 of 1
Using SSL Certs for Passwords
Posted: Mon Oct 24, 2011 11:32 am
by carocho
Hi...
I have some doubts on the fixed topic about this.
I have my unreal3.2.8.1 in a Debian server but usually i connect to it with xchat client in windows...
So, to create my .pem files, should i use the windows or the *Nix version of the
tutorial?
I already have tried both but i'm getting this error when performing the "./oper mynick *" command:
* No O-lines for your host
In unrealircd.conf i have this:
Code: Select all
oper myircnick {
class clients;
from {
userhost myircnick!*@*;
};
password "myircnick.pem" {
sslclientcert;
};
flags
{
can_zline;
can_gzline;
can_gkline;
global;
};
};
Re: Using SSL Certs for Passwords
Posted: Mon Oct 24, 2011 11:52 am
by Stealth
userhost cannot contain a nickname.
Re: Using SSL Certs for Passwords
Posted: Mon Oct 24, 2011 12:33 pm
by carocho
So how do i know my userhost?
Re: Using SSL Certs for Passwords
Posted: Mon Oct 24, 2011 2:13 pm
by carocho
Is my user host, the ip of the computer that i am connecting from to my irc client?
Re: Using SSL Certs for Passwords
Posted: Mon Oct 24, 2011 2:46 pm
by carocho
My actual IP is pa1-84-91-3-222.netvisao.pt or 84.91.3.222...
Is any of these my host?
Re: Using SSL Certs for Passwords
Posted: Mon Oct 24, 2011 10:12 pm
by Stealth
If you're using certs for passwords it's perfectly safe to use *@*, especially since if someone got your cert you have bigger problems to deal with.
From the manual:
The oper::from::userhost is a user@host mask that the user must match, you can specify more than one hostmask by creating more than one oper::from::userhost.
Re: Using SSL Certs for Passwords
Posted: Tue Oct 25, 2011 7:20 am
by carocho
Stealth wrote:If you're using certs for passwords it's perfectly safe to use *@*,
especially since if someone got your cert you have bigger problems to deal with.
From the manual:
The oper::from::userhost is a user@host mask that the user must match, you can specify more than one hostmask by creating more than one oper::from::userhost.
My difficulty is to identify my userhost... If it can't contain a nick, if is not my IP, if it is not this pa1-84-91-3-222.netvisao.pt, so i can't figure out what it could be...
Anyway, if you say it's pretty safe to use *@* if i use certs, so i don't understand the last part of your statment that i've underlined and bolded...
Can you say it in other words?
Re: Using SSL Certs for Passwords
Posted: Tue Oct 25, 2011 10:45 am
by carocho
carocho wrote:Stealth wrote:If you're using certs for passwords it's perfectly safe to use *@*,
especially since if someone got your cert you have bigger problems to deal with.
From the manual:
The oper::from::userhost is a user@host mask that the user must match, you can specify more than one hostmask by creating more than one oper::from::userhost.
My difficulty is to identify my userhost... If it can't contain a nick, if is not my IP, if it is not this pa1-84-91-3-222.netvisao.pt, so i can't figure out what it could be...
Anyway, if you say it's pretty safe to use *@* if i use certs, so i don't understand the last part of your statment that i've underlined and bolded...
Can you say it in other words?
Further i got this error creating my certs under Windows...
Re: Using SSL Certs for Passwords
Posted: Tue Oct 25, 2011 12:16 pm
by Stealth
Anyway, if you say it's pretty safe to use *@* if i use certs, so i don't understand the last part of your statment that i've underlined and bolded...
Your certificate is your identity and should be kept secret. If someone gets your certificate they become you.
My difficulty is to identify my userhost... If it can't contain a nick, if is not my IP, if it is not this pa1-84-91-3-222.netvisao.pt, so i can't figure out what it could be...
If you have ever used IRC you would know what your user@host is. It is what the server sees you as when you WHOIS yourself.
Further i got this error creating my certs under Windows...
If you are having difficulty generating your cert, use my online certificate generator at
https://unreal.x-tab.org/cert.php
Lastly, running an IRC server
requires knowledge of how IRC works and IRC terminology. You are demonstrating that you do not know either of those items. Perhaps you should create a channel for your needs on a small network rather than trying to create a server yourself, or find someone who knows how to create and run a server to do this for you.
Re: Using SSL Certs for Passwords
Posted: Tue Oct 25, 2011 2:40 pm
by carocho
Stealth wrote:
...
My difficulty is to identify my userhost... If it can't contain a nick, if is not my IP, if it is not this pa1-84-91-3-222.netvisao.pt, so i can't figure out what it could be...
If you have ever used IRC you would know what your user@host is. It is what the server sees you as when you WHOIS yourself.
I use irc for sometime...
When i whois myself i get this:
So wich one is my userhost???
Anyone that what to start, gotta start from somewhere...
I have some basic concepts but obviously not enough to create a network all by my self, and i'm interested in learning...
So i have to make some questions...
Re: Using SSL Certs for Passwords
Posted: Tue Oct 25, 2011 2:50 pm
by katsklaw
You're right, we all have to start somewhere. However, its logical to start at the beginning, no 75% of the way in. The beginning is as a user in a channel until you learn a few things. Then as a Channel operator, then ircop, then admin.
You are trying to start at admin which doesn't work well. There are 37573928575 other things you need to know first.
You may know a few things, but you still dont know enough to be a channel operator much less an admin. Stealth and I have years and years of experience, we know what we are talking about and know what skills you are lacking.
It is normal for you to ask questions while.you learn, it's also normal for you to know what a hostmask is at the time you start learning about server administration. Irc server setup is an advanced task, not a novice task.
I'm not saying you shouldn't learn, I'm saying you need yo learn irc first. Right now you are trying to build a house on mud and the blueprints are in a language you can't read.
Re: Using SSL Certs for Passwords
Posted: Tue Oct 25, 2011 8:22 pm
by carocho
katsklaw, i really appreciate your comment/advice...
I'll follow part of it but i just can't follow everything... I'm OP in one channel but i don't think i can ever become an ircop in any irc. So i've just to read a lot, test, ask, get mad, get frustrated, get a small win, get furious, get mad, then get an average win and keep going 'till i get what i want...
I've been using Linux for about 2 years and a half and i know that there is yet a lot to learn about linux. As matter a fact i don't know "nothing" about Linux but i'm already capable of seting up a server to use rtorrent/rutorren, an webadmin interface, an FTP server, an SSH server, VNC server.
I didn't know Linux at all but i've started from somewhere (0) and with a lot of reading, asking and frustration, i can say that a know only the basics.
This afternoon i was search google for some nice explanation about file/dir permissions... Today something else got into my head about linux... I finally understood permissions (777, 755, 644, 600) and so on...
This was a small victory...
About a year ago i started to learn how to set up an eggdrop... Today i have a basic bot that is able to interact with users via TCL scripts... :p
Well, i'm going to read a bit more...