2 6960cb4c 2004-12-27 alex ngIRCd - Next Generation IRC Server
4 6960cb4c 2004-12-27 alex (c)2001-2004 by Alexander Barton,
5 6960cb4c 2004-12-27 alex alex@barton.de, http://www.barton.de/
7 6960cb4c 2004-12-27 alex ngIRCd is free software and published under the
8 6960cb4c 2004-12-27 alex terms of the GNU General Public License.
10 6960cb4c 2004-12-27 alex -- SSL.txt --
13 6960cb4c 2004-12-27 alex ngIRCd actually doesn't support secure connections for client-server or
14 6960cb4c 2004-12-27 alex server-server links using SSL, the Secure Socket Layer, by itself. But you can
15 81bacda6 2004-12-27 alex use the stunnel(8) command to make this work.
17 81bacda6 2004-12-27 alex <http://stunnel.mirt.net/>
18 81bacda6 2004-12-27 alex <http://www.stunnel.org/>
20 6960cb4c 2004-12-27 alex Stefan Sperling (stefan at binarchy dot net) mailed me the following text as a
21 6960cb4c 2004-12-27 alex short "how-to", thanks Stefan!
24 6960cb4c 2004-12-27 alex === snip ===
25 6960cb4c 2004-12-27 alex ! This guide applies to stunnel 4.x !
27 6960cb4c 2004-12-27 alex Put this in your stunnel.conf:
30 6960cb4c 2004-12-27 alex accept = 6667
31 6960cb4c 2004-12-27 alex connect = 6668
33 6960cb4c 2004-12-27 alex This makes stunnel listen for incoming connections
34 6960cb4c 2004-12-27 alex on port 6667 and forward decrypted data to port 6668.
35 6960cb4c 2004-12-27 alex We call the connection 'ircs'. Stunnel will use this
36 6960cb4c 2004-12-27 alex name when logging connection attempts via syslog.
37 6960cb4c 2004-12-27 alex You can also use the name in /etc/hosts.{allow,deny}
38 6960cb4c 2004-12-27 alex if you run tcp-wrappers.
40 6960cb4c 2004-12-27 alex To make sure ngircd is listening on the port where
41 6960cb4c 2004-12-27 alex the decrypted data arrives, set
43 6960cb4c 2004-12-27 alex Ports = 6668
45 6960cb4c 2004-12-27 alex in your ngircd.conf.
47 6960cb4c 2004-12-27 alex Start stunnel and restart ngircd.
50 6960cb4c 2004-12-27 alex Don't forget to activate ssl support in your irc client ;)
51 6960cb4c 2004-12-27 alex === snip ===
54 6960cb4c 2004-12-27 alex Probably ngIRCd will include support for SSL in the future ...
58 81bacda6 2004-12-27 alex $Id: SSL.txt,v 1.2 2004/12/27 01:11:40 alex Exp $