1 6960cb4c 2004-12-27 alex 
 2 6960cb4c 2004-12-27 alex                      ngIRCd - Next Generation IRC Server
 3 6960cb4c 2004-12-27 alex 
 4 6960cb4c 2004-12-27 alex                       (c)2001-2004 by Alexander Barton,
 5 6960cb4c 2004-12-27 alex                     alex@barton.de, http://www.barton.de/
 6 6960cb4c 2004-12-27 alex 
 7 6960cb4c 2004-12-27 alex                ngIRCd is free software and published under the
 8 6960cb4c 2004-12-27 alex                    terms of the GNU General Public License.
 9 6960cb4c 2004-12-27 alex 
10 6960cb4c 2004-12-27 alex                                  -- SSL.txt --
11 6960cb4c 2004-12-27 alex 
12 6960cb4c 2004-12-27 alex 
13 6960cb4c 2004-12-27 alex ngIRCd actually doesn't support secure connections for client-server or
14 6960cb4c 2004-12-27 alex server-server links using SSL, the Secure Socket Layer, by itself. But you can
15 81bacda6 2004-12-27 alex use the stunnel(8) command to make this work.
16 6960cb4c 2004-12-27 alex 
17 81bacda6 2004-12-27 alex   <http://stunnel.mirt.net/>
18 81bacda6 2004-12-27 alex   <http://www.stunnel.org/>
19 81bacda6 2004-12-27 alex 
20 6960cb4c 2004-12-27 alex Stefan Sperling (stefan at binarchy dot net) mailed me the following text as a
21 6960cb4c 2004-12-27 alex short "how-to", thanks Stefan!
22 6960cb4c 2004-12-27 alex 
23 6960cb4c 2004-12-27 alex 
24 6960cb4c 2004-12-27 alex === snip ===
25 6960cb4c 2004-12-27 alex     ! This guide applies to stunnel 4.x !
26 6960cb4c 2004-12-27 alex 
27 6960cb4c 2004-12-27 alex     Put this in your stunnel.conf:
28 6960cb4c 2004-12-27 alex 
29 6960cb4c 2004-12-27 alex         [ircs]
30 6960cb4c 2004-12-27 alex         accept = 6667
31 6960cb4c 2004-12-27 alex         connect = 6668
32 6960cb4c 2004-12-27 alex 
33 6960cb4c 2004-12-27 alex     This makes stunnel listen for incoming connections
34 6960cb4c 2004-12-27 alex     on port 6667 and forward decrypted data to port 6668.
35 6960cb4c 2004-12-27 alex     We call the connection 'ircs'. Stunnel will use this
36 6960cb4c 2004-12-27 alex     name when logging connection attempts via syslog.
37 6960cb4c 2004-12-27 alex     You can also use the name in /etc/hosts.{allow,deny}
38 6960cb4c 2004-12-27 alex     if you run tcp-wrappers.
39 6960cb4c 2004-12-27 alex 
40 6960cb4c 2004-12-27 alex     To make sure ngircd is listening on the port where
41 6960cb4c 2004-12-27 alex     the decrypted data arrives, set
42 6960cb4c 2004-12-27 alex 
43 6960cb4c 2004-12-27 alex         Ports = 6668
44 6960cb4c 2004-12-27 alex 
45 6960cb4c 2004-12-27 alex     in your ngircd.conf.
46 6960cb4c 2004-12-27 alex 
47 6960cb4c 2004-12-27 alex     Start stunnel and restart ngircd.
48 6960cb4c 2004-12-27 alex 
49 6960cb4c 2004-12-27 alex     That's it.
50 6960cb4c 2004-12-27 alex     Don't forget to activate ssl support in your irc client ;)
51 6960cb4c 2004-12-27 alex === snip ===
52 6960cb4c 2004-12-27 alex 
53 6960cb4c 2004-12-27 alex 
54 6960cb4c 2004-12-27 alex Probably ngIRCd will include support for SSL in the future ...
55 6960cb4c 2004-12-27 alex 
56 6960cb4c 2004-12-27 alex 
57 6960cb4c 2004-12-27 alex -- 
58 81bacda6 2004-12-27 alex $Id: SSL.txt,v 1.2 2004/12/27 01:11:40 alex Exp $