To create new wiki account, please join us on #znc at Libera.Chat and ask admins to create a wiki account for you. You can say thanks to spambots for this inconvenience.

Partyline and OpenSSL.cnf SelfSigned: Difference between pages

From ZNC
(Difference between pages)
Jump to navigation Jump to search
Zarthus (talk | contribs)
No edit summary
 
DoctorD90 (talk | contribs)
Created page with " [default] default_md = sha512 name_opt = ca_default cert_opt = ca_default default_days = 375 policy = @policy_selfsigned [ re..."
 
Line 1: Line 1:
{{DISPLAYTITLE:partyline}}
[default]
 
default_md        = sha512
{{ambox | type = delete | text = '''Partyline is retired'''.<br/>
name_opt          = ca_default
<small>The Partyline module has been retired from ZNC version 1.8. There is no alternative, though you can go back through the git history to re-obtain the module if you still need it.</small>}}
cert_opt          = ca_default
 
default_days      = 375
Partyline is like a small internal IRC network inside your bouncer. It allows any user connected to your bouncer to chat with other users. This is a global module. The etymology of this module's name stems from the historical arrangement in telephony referred to as a [http://en.wikipedia.org/wiki/Party_line_(telephony) party line].
policy            = @policy_selfsigned
 
== Usage ==
[ req ]
 
#Options from the [ req ] section are applied
{{Module arguments|count=any number of|type=global|extra=The arguments are a list of channel names which users join automatically.}}
#when creating certificates or certificate signing requests.
 
# Options for the `req` tool (`man req`).
=== Commands ===
default_bits        = 4096
When this module is loaded it watches user input for channels starting with ~ (tilde)
distinguished_name  = req_selfsigned
 
string_mask        = utf8only
This means that you can '''/join ~#channel''' and the module will catch this and join you to the internal channel without forwarding that message on to IRC. Anyone connected to your ZNC will be able to join any ~#channel with eachother regardless of which irc network they are connected to.
default_md          = sha512
 
You can also '''/msg ?zncuser''' to have a private chat with another user connected to your ZNC.
 
[ req_selfsigned ]
==== list ====
# The [ req_dn ] section declares the information
To get a list of available channels you can use '''/msg *partyline list''':
# normally required in a certificate signing request.
  <prozac> list
# You can optionally specify some defaults.
  <*partyline> +---------+-------+
# See <https://en.wikipedia.org/wiki/Certificate_signing_request>.
  <*partyline> | Channel | Users |
countryName                    = Country Name (2 letter code)
  <*partyline> +---------+-------+
countryName_min                = 2
  <*partyline> | ~#foo  | 1    |
countryName_max                = 2
  <*partyline> | ~#znc  | 2    |
stateOrProvinceName            = State or Province Name (full name)
  <*partyline> +---------+-------+
localityName                    = Locality Name (eg, city)
organizationName                = Organization Name (eg, company)
organizationalUnitName          = Organizational Unit Name (eg, section)
commonName                      = Common Name (e.g. server FQDN or YOUR name)
emailAddress                    = Email Address
# Optionally, specify some defaults.
countryName_default            = IT
stateOrProvinceName_default    = Italy
localityName_default            = Italy
organizationName_default        = ZNC.in
#organizationalUnitName_default  = ZNC Service
#commonName_default            = wiki.znc.in
emailAddress_default            = user [at] example [dot] com
[ policy_selfsigned ]
# See the POLICY FORMAT section of the `ca` man page.
countryName            = optional
stateOrProvinceName    = optional
localityName            = optional
organizationName        = optional
organizationalUnitName  = optional
commonName              = optional
emailAddress            = optional
[ usr_cert ]
# We’ll apply the usr_cert extension when signing client certificates,
# such as those used for remote user authentication.
# Extensions for client certificates (`man x509v3_config`).
basicConstraints = critical, CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always, issuer:always
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement
extendedKeyUsage = critical, clientAuth, emailProtection, codeSigning
   
  [ server_cert ]
  # We’ll apply the server_cert extension when signing server certificates,
  # such as those used for web servers.
  # Extensions for server certificates (`man x509v3_config`).
basicConstraints = critical, CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always, issuer:always
  keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, keyAgreement
  extendedKeyUsage = critical, serverAuth

Revision as of 18:03, 23 August 2021

[default]
default_md        = sha512
name_opt          = ca_default
cert_opt          = ca_default
default_days      = 375
policy            = @policy_selfsigned

[ req ]
#Options from the [ req ] section are applied
#when creating certificates or certificate signing requests.
# Options for the `req` tool (`man req`).
default_bits        = 4096
distinguished_name  = req_selfsigned
string_mask         = utf8only
default_md          = sha512


[ req_selfsigned ]
# The [ req_dn ] section declares the information
# normally required in a certificate signing request.
# You can optionally specify some defaults.
# See <https://en.wikipedia.org/wiki/Certificate_signing_request>.
countryName                     = Country Name (2 letter code)
countryName_min                 = 2
countryName_max                 = 2
stateOrProvinceName             = State or Province Name (full name)
localityName                    = Locality Name (eg, city)
organizationName                = Organization Name (eg, company)
organizationalUnitName          = Organizational Unit Name (eg, section)
commonName                      = Common Name (e.g. server FQDN or YOUR name)
emailAddress                    = Email Address

# Optionally, specify some defaults.
countryName_default             = IT
stateOrProvinceName_default     = Italy
localityName_default            = Italy
organizationName_default        = ZNC.in
#organizationalUnitName_default  = ZNC Service
#commonName_default             = wiki.znc.in
emailAddress_default            = user [at] example [dot] com

[ policy_selfsigned ]
# See the POLICY FORMAT section of the `ca` man page.
countryName             = optional
stateOrProvinceName     = optional
localityName            = optional
organizationName        = optional
organizationalUnitName  = optional
commonName              = optional
emailAddress            = optional

[ usr_cert ]
# We’ll apply the usr_cert extension when signing client certificates,
# such as those used for remote user authentication.
# Extensions for client certificates (`man x509v3_config`).
basicConstraints = critical, CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always, issuer:always
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement
extendedKeyUsage = critical, clientAuth, emailProtection, codeSigning

[ server_cert ]
# We’ll apply the server_cert extension when signing server certificates,
# such as those used for web servers.
# Extensions for server certificates (`man x509v3_config`).
basicConstraints = critical, CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always, issuer:always
keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment, keyAgreement
extendedKeyUsage = critical, serverAuth