diff --git a/pages/external/identifying.html b/pages/external/identifying.html index 6c97854..c4214f2 100644 --- a/pages/external/identifying.html +++ b/pages/external/identifying.html @@ -33,6 +33,7 @@ XX:XX:XX < *sasl> | PLAIN | Plain text negotiation XX:XX:XX < *sasl> +-------------+----------------------------------------------------+

Some notes:

-

Limnoria

+

Limnoria

Insert your .pem file somewhere where the bot can read it and tell your bot to read use it while connecting with

config networks.<network>.certfile /full/path/to/pem.file

NOTE: This is server specific. ProgVal/Limnoria#612 is feature request for global certfiles.

@@ -97,7 +114,7 @@ cp YOURNICKNAMEHERE.pem ~/.config/hexchat/certs/client.pem

Since Limnoria 2014.06.04 global certificate is supported. You can use the version command to check which version you are using.

config protocols.irc.certfile /full/path/to/pem.file

For instructions to upgrade Limnoria, please see their INSTALL.md file.

-

WeeChat

+

WeeChat

I recommend you to /script install iset.pl for easier configuring when you aren't following this.

Put the .pem file somewhere where your WeeChat can access it, preferably ~/.weechat or whenever your "WeeChat home" is and run the following commands in WeeChat:

/set irc.server_default.ssl_cert %h/YOURNICKNAMEHERE.pem"
@@ -110,7 +127,7 @@ cp YOURNICKNAMEHERE.pem ~/.config/hexchat/certs/client.pem
  • Sets dhkey_size to 1024 (required by some networks like freenode).
  • Disables verifying the certificates (required for self-signed certificates and I think that applies to our certificate too).
    • -

    ZNC

    +

    ZNC

    Please read the both parts as you must add the certificate in webadmin or read ZNC documentation on how to add it manually.

    Webadmin

    First login to your webadmin and if you are admin, go to the global settings. Check the checkbox certauth, scroll down and press "Save".

    diff --git a/pages/external/identifying.html.md b/pages/external/identifying.html.md index 3011659..f43bd3c 100644 --- a/pages/external/identifying.html.md +++ b/pages/external/identifying.html.md @@ -59,6 +59,7 @@ XX:XX:XX < *sasl> +-------------+----------------------------------------------- Some notes: +* **You must use your accountname as username**. * PLAIN is plain text as it says, so if you use it like I do, you should use SSL. * EXTERNAL is supposed to be used together with CertFP, but it doesn't @@ -71,19 +72,62 @@ work with most of networks. ### Using SASL with your client or bouncer - +Remember that I use all of these methods (SASL, CertFP, username:password, +automatic command). ### HexChat +Press `CTRL + S` or go to `HexChat --> Network list` and select the +network where you want to use SASL and click `Edit`. +If you want to specify server specific username, uncheck the `Use global user information` +checkbox. + +Change the `Login method:` from `Default` to `SASL (username + password) +and type your username and password. If you don't uncheck the box, you +must specify the username in network list. ### Limnoria +Limnoria supports SASL by default without any plugins. +``` +config networks..sasl.username NSACCOUNTNAME +config networks..sasl.password NSPASSWORD +``` ### WeeChat +WeeChat supports SASL by default when you configure it. It can be +configured globally or per network. You should do both. +#### Global configuration + +``` +/set irc.server.default.ssl on +/set irc.server_default.ssl_dhkey_size 1024 +/set irc.server_default.sasl.mechanism plain +/set irc.server_default.sasl.username +``` + +1. Enables SSL by default for all connections unless otherwise specified +which is in the next section. You do want this if you use the third +command like I do which makes the password be sent in plain text. +2. Fixes issues with connecting to freenode with SSL. +3. Sets the password to be sent in plain text (this is why you want SSL). +Plain text should be supported by every network that supports SASL. +4. Sets the default SASL username in case you have mostly same account +name in most of the networks which you are connected to. + +#### Network specific configuration + +``` +/set irc.server..sasl_username +/set irc.server..sasl_password +``` + +1. Sets the SASL username in case it's different that globally configured. +2. Sets the password which is used with SASL. ### ZNC