To create new wiki account, please join us on #znc at freenode and ask admins to create a wiki account for you. You can say thanks to spambots for this inconvenience.

Difference between revisions of "Cert"

From ZNC
Jump to: navigation, search
(Generating a certificate)
Line 3: Line 3:
 
This module lets users use their own SSL certificate to connect to a server, such as [http://www.oftc.net/oftc/NickServ/CertFP CertFP].  
 
This module lets users use their own SSL certificate to connect to a server, such as [http://www.oftc.net/oftc/NickServ/CertFP CertFP].  
  
You will have to generate a SSL certificate to use with this module and either place it at `~/.znc/users/<user>/moddata/cert/user.pem` or use the web admin to upload the certificate.
+
You will have to generate a SSL certificate to use with this module and either place it at `~/.znc/users/<user>/moddata/cert/user.pem` or use the web interface to upload the certificate.
  
 
{{Module arguments|type=user/network}}
 
{{Module arguments|type=user/network}}

Revision as of 04:48, 17 June 2013


This module lets users use their own SSL certificate to connect to a server, such as CertFP.

You will have to generate a SSL certificate to use with this module and either place it at `~/.znc/users/<user>/moddata/cert/user.pem` or use the web interface to upload the certificate.

Arguments

This user/network module takes no arguments.

Read loading modules to learn more about loading modules.

Commands

+---------+-----------+--------------------------------+
| Command | Arguments | Description                    |
+---------+-----------+--------------------------------+
| Help    |           | Generate this output           |
| delete  |           | Delete the current certificate |
| info    |           |                                |
+---------+-----------+--------------------------------+

Generating a certificate

You can use the following openssl commands to generate a certificate

openssl req -nodes -newkey rsa:2048 -keyout znc.key -x509 -days 365 -out znc.crt
cat znc.crt znc.key > znc.pem

This command would produce a 2048-bit certificate which would expire in 365 days. You can modify the arguments to openssl to change this. znc.pem is the certificate you will need to add to ZNC.