To create new wiki account, please join us on #znc at freenode and ask admins to create a wiki account for you. You can say thanks to spambots for this inconvenience.

Signed SSL certificate

From ZNC
Revision as of 13:50, 17 December 2011 by DarthGandalf (talk) (Created page with "If you want to use your StartSSL web server certificate in ZNC, you need to put your private key and the your certificate into ~/.znc/znc.pem. The certificate now gets validat...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

If you want to use your StartSSL web server certificate in ZNC, you need to put your private key and the your certificate into ~/.znc/znc.pem. The certificate now gets validated, but the validation fails, since the root certificate is properly not know on your machine (while most browser come built-in with the root certificate). So you either make the certificate known to your machine (and all your ZNC users) or your put the root cert into your znc.pem file like the following:

  1. cd ~/.znc/
  2. wget https://www.startssl.com/certs/sub.class1.server.ca.pem -O startssl.com.root.pem
  3. cat startssl.com.root.pem >> znc.pem

It seems the order in your znc.pem must be "key", "own cert" and "root cert". If you get connection errors, make sure you done it right. You can test your certificate without connecting to znc with the following command:

openssl s_client -showcerts -connect domain.tld:6667

Change the domain and port to your domain and znc's listening port.