Trying to connect to palladium.libera.chat through Tor with HexChat
client
reddit / irc

----------------------------------------------------------------------
g-unit2 · 2023-12-21 04:58

Why do i see this error:
```
*** Notice -- Public-key (NOT password) SASL authentication is
required to connect to the Tor onion service.
```

On HexChat when trying to connect? I have generated a SSL/TLS key with
```
openssl req -x509 -new -newkey ed25519 -sha256 -days 1096 -nodes -out
libera.pem -keyout libera.pem
```

I have placed this `.pem` key in `~/.config/hexchat/certs`

in my "Network List" I have created a new network called LiberaTor,
and in the configuration i have set the server to
`palladium.libera.chat`, and the Login method as "SASL EXTERNAL
(cert)"

Here are is my HexChat Network configuration:
https://imgur.com/a/UAJOX6b

Directory structure:
```
~/.config/hexchat$ tree .
.
├── addon_checksum.conf
├── addons
├── certs
│   └── libera.pem
├── chanopt.conf
├── colors.conf
├── [Content_Types].xml
├── hexchat.conf
├── ignore.conf
├── logs
│   ├── NETWORK
│   │   └── server.log
│   ├── torliberachat
│   │   └── torliberachat.log
│   └── ubuntu servers (libera.chat)
│       ├── libera.chat.log
│       ├── server.log
│       ├── #ubuntu.log
│       └── ubuntu servers (libera.chat).log
├── notify.conf
├── scrollback
│   └── ubuntu servers (libera.chat)
│       └── #ubuntu.txt
├── servlist.conf
├── sound.conf
└── sounds
```

Tor is running fine:
```
# systemctl status tor
● tor.service - Anonymizing overlay network for TCP (multi-instance-
master)
     Loaded: loaded (/lib/systemd/system/tor.service; enabled; vendor
preset: enabled)
     Active: active (exited) since Wed 2023-12-20 19:46:43 PST; 1h
5min ago
    Process: 22437 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
   Main PID: 22437 (code=exited, status=0/SUCCESS)
        CPU: 5ms

Dec 20 19:46:43 user-thinkpad systemd[1]: Starting Anonymizing overlay
network for TCP (multi-instance-master)...
Dec 20 19:46:43 user-thinkpad systemd[1]: Finished Anonymizing overlay
network for TCP (multi-instance-master).
```

Full log for context:
```
* Looking up palladium.libera.chat
* Looking up 127.0.0.1
* Connecting to 127.0.0.1 (127.0.0.1:9050)
* * Subject: /C=US/O=Internet Security Research Group/CN=ISRG Root X1
* * Issuer: /C=US/O=Internet Security Research Group/CN=ISRG Root X1
* * Subject: /C=US/O=Let's Encrypt/CN=R3
* * Issuer: /C=US/O=Internet Security Research Group/CN=ISRG Root X1
* * Subject: /CN=palladium.libera.chat
* * Issuer: /C=US/O=Let's Encrypt/CN=R3
* * Certification info:
*   Subject:
*     CN=palladium.libera.chat
*   Issuer:
*     C=US
*     O=Let's Encrypt
*     CN=R3
*   Public key algorithm: rsaEncryption (4096 bits)
*   Sign algorithm sha256WithRSAEncryption
*   Valid since Nov 27 13:13:56 2023 GM to Feb 25 13:13:55 2024 GM
* * Cipher info:
*   Version: TLSv1.3, cipher TLS_AES_256_GCM_SHA384 (256 bits)
* Connected. Now logging in.
* *** Ident disabled, not checking ident
* *** Looking up your hostname...
* *** Couldn't look up your hostname
* Capabilities supported: account-notify away-notify chghost extended-
join multi-prefix sasl=PLAIN,ECDSA-NIST256P-CHALLENGE,EXTERNAL tls
account-tag cap-notify echo-message server-time solanum.chat/identify-
msg solanum.chat/oper solanum.chat/realhost
* Capabilities requested: account-notify away-notify chghost extended-
join multi-prefix sasl account-tag cap-notify server-time
solanum.chat/identify-msg
* Capabilities acknowledged: account-notify away-notify chghost
extended-join multi-prefix sasl account-tag cap-notify server-time
solanum.chat/identify-msg
* SASL authentication failed
* SASL authentication aborted
* *** Notice -- Public-key (NOT password) SASL authentication is
required to connect to the Tor onion service. Please see
https://libera.chat/guides/connect#accessing-liberachat-via-tor for
configuration assistance.
* Closing Link: gateway/tor-sasl/account (Public-key (NOT password)
SASL authentication is required to connect to the Tor onion service.
Please see https://libera.chat/guides/connect#accessing-liberachat-
via-tor for configuration assistance.)
* Disconnected (Remote host closed socket)
```

----------------------------------------------------------------------
ProgVal · 2023-12-21 09:40

Did you create an account on Libera.Chat, and assign it your
certificate fingerprint?

----------------------------------------------------------------------
skizzerz1 · 2023-12-22 14:57

You need to first connect over clearnet (aka not Tor) to register an
account with NickServ and set up your cert fingerprint with NickServ.