Re: [dev] [ii] connect to servers with self signed tls certificates

From: Hiltjo Posthuma <hiltjo_AT_codemadness.org>
Date: Sat, 29 Oct 2022 20:18:22 +0200

On Sat, Oct 29, 2022 at 11:38:10AM -0500, fernandoreyesavila3 wrote:
> Hello all,
>
> I am hosting an ergo irc server with self signed certificates.
> Connecting to any public irc server works as expected. ii prints the
> following when I try to connect to my server.
>
> $ ii -s servername.com -p 6697
> NICK nando
> USER nando localhost servername.com :nando
>
> ii: remote host closed connection: No such file or directory
>
> I patched ii with tls encryption support and ran
>
> $ ii -t -s servername.com -p 6697
> ii: tls_handshake: certificate verification failed: self signed certificate
>
> I connected through hexchat by accepting invalid ssl certificates.
> Is there a similair option for ii? Any help would be appreciated.
>
> Best,
> Fernando
>

Hi,

With LibreSSL libtls: you could set a certificate file:

        https://man.openbsd.org/tls_config_set_ca_file

Maybe you could add a command-line flag that allows to set this certificate so it
can be set per server.

Just an idea,

-- 
Kind regards,
Hiltjo
Received on Sat Oct 29 2022 - 20:18:22 CEST

This archive was generated by hypermail 2.3.0 : Sat Oct 29 2022 - 20:24:08 CEST