Where does InspIRCd pick up its SSL Certificates?
reddit / irc

----------------------------------------------------------------------
predatorian3 · 2016-02-29 00:53

When compiling InspIRCd from source using a script, the ./configure
script doesn't give an option (that i've seen) to generate, or use an
SSL Certificate, and in the configuration, I didn't see a spot to
specify an SSL Certificate. Does InspIRCd pick it up from the OS
specific locations, or does it need to be relative to the InspIRCd
binary?

----------------------------------------------------------------------
shacknetisp · 2016-02-29 01:43

I'm unsure about automatically generated keys, but after you've got
InspIRCd ready you can use something like this in your inspircd.conf
to add a certificate:

`<gnutls certfile="/path/to/cert" keyfile="/path/to/key"
priority="NORMAL:-MD5" hash="sha1">`

(Don't forget to enable SSL in the `<bind>`: `<bind address=""
port="6697" type="clients" ssl="gnutls">`)

----------------------------------------------------------------------
Saber_UK · 2016-03-01 12:31

Hi, InspIRCd developer here.

>When compiling InspIRCd from source using a script, the ./configure
script doesn't give an option (that i've seen) to generate, or use an
SSL Certificate, and in the configuration,

When you run ./configure it should ask you about enabling SSL support.
If it did not do that then you might not have the required
dependencies to build the SSL modules. You need pkg-config and either
the GnuTLS or OpenSSL development packages installed.

>I didn't see a spot to specify an SSL Certificate. Does InspIRCd pick
it up from the OS specific locations, or does it need to be relative
to the InspIRCd binary?

InspIRCd will look for cert.pem, key.pem, dhparams.pem (OpenSSL only),
crl.pem (optional, GnuTLS only) and ca.pem (optional) in your config
directory. If you have installed system-wide then you'll need to
explicitly specify the paths though, see the wiki pages for
[GnuTLS](https://wiki.inspircd.org/Modules/2.0/ssl_gnutls) or
[OpenSSL](https://wiki.inspircd.org/Modules/2.0/ssl_openssl) for more
info on that.

---

P.S. In the future you might be better off asking for support in our
IRC channel at irc.chatspike.net \#inspircd.

----------------------------------------------------------------------
predatorian3 · 2016-03-01 13:52

Thank you for your help! Cleared that up real quick. I figured I'd ask
on here for anyone else who was interested. I'll add that server to my
list of IRC servers.

----------------------------------------------------------------------
predatorian3 · 2016-03-01 13:53

Thank you for your help, I'll play with those lines.