To create new wiki account, please join us on #znc at Libera.Chat and ask admins to create a wiki account for you. You can say thanks to spambots for this inconvenience.

ZNC and OpenSSL.cnf SelfSigned: Difference between pages

From ZNC
(Difference between pages)
Jump to navigation Jump to search
 
DoctorD90 (talk | contribs)
94 edits
Created page with " [default] default_md = sha512 name_opt = ca_default cert_opt = ca_default default_days = 375 policy = @policy_selfsigned [ re..."
 
Line 1: Line 1:
__NOTOC__ {{Languages}}
[default]
 
default_md        = sha512
Welcome to the '''ZNC wiki''' where you may find and publish information about '''ZNC''', an advanced [http://en.wikipedia.org/wiki/BNC_%28software%29#IRC IRC bouncer] that is left connected so an IRC client can disconnect/reconnect without losing the chat session. Feel free to update pages which you think are improvable and don't hesitate to ask for help.
name_opt          = ca_default
 
cert_opt          = ca_default
[[File:Znc-0.99-black.png|right]]
default_days      = 375
 
policy            = @policy_selfsigned
You can find us in [irc://irc.efnet.org/znc #znc on EFNet].
 
[ req ]
The latest stable release is '''{{ZNC-Version}}''' ([[ChangeLog]]).
#Options from the [ req ] section are applied
 
#when creating certificates or certificate signing requests.
== Download ZNC {{ZNC-Version}} ==
# Options for the `req` tool (`man req`).
You can find the latest stable release '''[http://znc.in/releases/znc-{{ZNC-Version}}.tar.gz <span style="color:#FF0000">here</span>]'''!
default_bits        = 4096
 
distinguished_name  = req_selfsigned
Or you can try testing version, using [[git]] or from '''[http://znc.in/releases/znc-1.0-alpha1.tar.gz <span style="color:#7F0000">ZNC 1.0-alpha1</span>] tarball'''!
string_mask        = utf8only
 
default_md          = sha512
== How does it work? ==
* Install ZNC on your server.
* Generate an initial [[configuration]] via <code>znc --makeconf</code>.
[ req_selfsigned ]
** '''For each IRC network, you need to create a ZNC user.'''
# The [ req_dn ] section declares the information
** For example, use one user for Freenode, one user for EFnet, one user for Quakenet, etc.
# normally required in a certificate signing request.
** You can later change settings (add more users, tune existing ones, etc.) via the [[webadmin|web interface]] or from [[admin|IRC]].
# You can optionally specify some defaults.
* Configure your IRC client to connect to your ZNC server.
# See <https://en.wikipedia.org/wiki/Certificate_signing_request>.
** It's a good idea to use <code>username:password</code> as the '''password''' in your client, so that ''(even for broken clients)'' ZNC can figure out which user you are connecting as.
countryName                    = Country Name (2 letter code)
* Read the [[FAQ]] if you run into any problems. Feel free to ask on IRC if you need more help.
countryName_min                = 2
* Enjoy! (Profit?)
countryName_max                = 2
 
stateOrProvinceName            = State or Province Name (full name)
== Main Features ==
localityName                    = Locality Name (eg, city)
 
organizationName                = Organization Name (eg, company)
; [[Modules|Modules]] : ZNC supports dynamic loading of [[Writing modules|C++]], [[modperl|Perl]], [[modpython|Python]] and [[modtcl|Tcl]] modules. To get a list of the available modules and more information follow the link.
organizationalUnitName          = Organizational Unit Name (eg, section)
; [[Detaching]] : ZNC will remain connected to IRC even while you are offline. You can then reattach later and catch up with what happened while you were gone, and your nick (and operator status) will have been kept for you.
commonName                      = Common Name (e.g. server FQDN or YOUR name)
; Multiple Users : You can add additional users under one running process. Useful for public shells that limit background processes. Each user can connect to one IRC network.
emailAddress                    = Email Address
; Multiple Clients : Connect to the same user with as many clients as you want.
; Playback Buffers : Stay up-to-date with what happened and when it happened while you were detached, [[timestamps]] are also printed and can be manually configured.
# Optionally, specify some defaults.
; SSL Support : Encryption for both the listen port and connecting to IRC servers. If your system has OpenSSL, ZNC automatically supports SSL connections.
countryName_default            = IT
; IPv6 Support : Both IPv4 and IPv6 address families just work, if your system supports them.
stateOrProvinceName_default    = Italy
; Partyline : Using the global [[partyline]] module, you can join channels and query users on the internal ZNC network
localityName_default            = Italy
; Web Administration : Using the global [[webadmin]] module, admins can add/remove/edit users and global settings and non admins can edit their own user settings. [[Image:Webadmin-settings-dark-clouds.png|thumb|Screenshot of the [[Webadmin]] module in action]]
organizationName_default        = ZNC.in
 
#organizationalUnitName_default  = ZNC Service
== Getting started ==
#commonName_default            = wiki.znc.in
* [[Portability]]
emailAddress_default            = user [at] example [dot] com
* [[Installation|Download and Installation]]
* [[Configuration]]
[ policy_selfsigned ]
* [[FAQ]]
# See the POLICY FORMAT section of the `ca` man page.
* [[Using commands|Using ZNC]]
countryName            = optional
 
stateOrProvinceName    = optional
=== Further Info ===
localityName            = optional
* [[Using ident spoofs|Setting up ident spoofs via oidentd]]
organizationName        = optional
* [[Chroot]]
organizationalUnitName  = optional
* [[ZNC Backup]]
commonName              = optional
* [[Running ZNC as a system daemon]]
emailAddress            = optional
* [[StartSSL|Using signed SSL cert]]
* [[History]]
[ usr_cert ]
 
# We’ll apply the usr_cert extension when signing client certificates,
=== Writing modules ===
# such as those used for remote user authentication.
* [[Writing modules|Writing C++ modules]]
# Extensions for client certificates (`man x509v3_config`).
* [[modperl|Writing Perl modules]]
basicConstraints = critical, CA:FALSE
* [[modtcl|Writing Tcl modules]]
subjectKeyIdentifier = hash
* [[modpython|Writing Python modules]]
authorityKeyIdentifier = keyid:always, issuer:always
* [[Debugging]]
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement
 
extendedKeyUsage = critical, clientAuth, emailProtection, codeSigning
== External Links ==
'''Please note that as of February 2011 we have abandoned SourceForge and moved to GitHub.'''
[ server_cert ]
* [https://github.com/znc/znc ZNC project page on GitHub]
# We’ll apply the server_cert extension when signing server certificates,
* [http://freshmeat.net/projects/znc ZNC on FreshMeat]
# such as those used for web servers.
* [http://www.ohloh.net/p/znc ZNC on Ohloh]
# Extensions for server certificates (`man x509v3_config`).
 
basicConstraints = critical, CA:FALSE
[[Category:ZNC]]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always, issuer:always
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, keyAgreement
extendedKeyUsage = critical, serverAuth

Revision as of 18:03, 23 August 2021

[default]
default_md        = sha512
name_opt          = ca_default
cert_opt          = ca_default
default_days      = 375
policy            = @policy_selfsigned

[ req ]
#Options from the [ req ] section are applied
#when creating certificates or certificate signing requests.
# Options for the `req` tool (`man req`).
default_bits        = 4096
distinguished_name  = req_selfsigned
string_mask         = utf8only
default_md          = sha512


[ req_selfsigned ]
# The [ req_dn ] section declares the information
# normally required in a certificate signing request.
# You can optionally specify some defaults.
# See <https://en.wikipedia.org/wiki/Certificate_signing_request>.
countryName                     = Country Name (2 letter code)
countryName_min                 = 2
countryName_max                 = 2
stateOrProvinceName             = State or Province Name (full name)
localityName                    = Locality Name (eg, city)
organizationName                = Organization Name (eg, company)
organizationalUnitName          = Organizational Unit Name (eg, section)
commonName                      = Common Name (e.g. server FQDN or YOUR name)
emailAddress                    = Email Address

# Optionally, specify some defaults.
countryName_default             = IT
stateOrProvinceName_default     = Italy
localityName_default            = Italy
organizationName_default        = ZNC.in
#organizationalUnitName_default  = ZNC Service
#commonName_default             = wiki.znc.in
emailAddress_default            = user [at] example [dot] com

[ policy_selfsigned ]
# See the POLICY FORMAT section of the `ca` man page.
countryName             = optional
stateOrProvinceName     = optional
localityName            = optional
organizationName        = optional
organizationalUnitName  = optional
commonName              = optional
emailAddress            = optional

[ usr_cert ]
# We’ll apply the usr_cert extension when signing client certificates,
# such as those used for remote user authentication.
# Extensions for client certificates (`man x509v3_config`).
basicConstraints = critical, CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always, issuer:always
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement
extendedKeyUsage = critical, clientAuth, emailProtection, codeSigning

[ server_cert ]
# We’ll apply the server_cert extension when signing server certificates,
# such as those used for web servers.
# Extensions for server certificates (`man x509v3_config`).
basicConstraints = critical, CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always, issuer:always
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, keyAgreement
extendedKeyUsage = critical, serverAuth
Retrieved from "https://wiki.znc.in/index.php?title=ZNC&oldid=2929"