Difference between revisions of "SSL" - MIXXnet Wiki MIXXnet Wiki Category: Services Privacy policy | About MIXXnet Wiki | Disclaimers Difference between revisions of "SSL" From MIXXnet Wiki Revision as of 05:25, 13 February 2006 (view source) Alex323 (Talk | contribs) m (→‎Security Information) ← Older edit Revision as of 05:33, 13 February 2006 (view source) Alex323 (Talk | contribs) (→‎Setup: - Added irssi documentation) Newer edit → Line 67: Line 67: To use SSL in [[XChat]], click '''X-Chat->Server List...'''. Next, click on MIXXnet and '''Edit..''' ('''Note:''' you may not have MIXXnet on your server list. If you don't, you can just click '''Close''' and type: /server servername.xx.xx.mixnet.net +port). Then select the two check boxes that say, '''Use SSL for all servers on this network''' and '''Accept invalid SSL certificate''' as shown below. To use SSL in [[XChat]], click '''X-Chat->Server List...'''. Next, click on MIXXnet and '''Edit..''' ('''Note:''' you may not have MIXXnet on your server list. If you don't, you can just click '''Close''' and type: /server servername.xx.xx.mixnet.net +port). Then select the two check boxes that say, '''Use SSL for all servers on this network''' and '''Accept invalid SSL certificate''' as shown below. [[Image:ssl_setup_xchat.png|thumb|250px|Screenshot of X-Chat with SSL enabled.]] [[Image:ssl_setup_xchat.png|thumb|250px|Screenshot of X-Chat with SSL enabled.]] + + ===irssi=== + The use of SSL in irssi is ''very'' simple. All you need to do is type the following commands into the status window:<br> + /set use_ssl on<br> + /set ssl_verify on<br> + /save<br> + After you have done these, you need to pass the -ssl flag to /connect when connecting to an SSL enabled server. For example:<br> + /connect -ssl ninjutsu.va.us.mixxnet.net 6697 ===Other Clients=== ===Other Clients=== − Other clients that support SSL include irssi and BitchX. + Other clients that support SSL include BitchX. ==Secure channels== ==Secure channels== Revision as of 05:33, 13 February 2006 Secure Sockets Layer (SSL) is a cryptographic protocol which provides secure communication on the Internet. Contents 1 Connection Information 2 Security Information 3 Servers 4 Links 4.1 Hub2.US 4.2 Hub2.EU 5 User & Channel Information 5.1 Identification 5.2 Channel Protection 6 Setup 6.1 mIRC 6.2 XChat 6.3 irssi 6.4 Other Clients 7 Secure channels 8 External Links Connection Information Users may connect to MIXXnet using any server that supports SSL. The default port is 6697 unless listed otherwise. You may download a copy of the CA certificate MIXXnet uses here. This file can be imported into some clients which allows for a "trusted" connection. It is not necessary for you to do this, but the option is available to you. On December 23, 2005, MIXXnet introduced a new round-robin address for SSL connectivity (irc.ssl.mixxnet.net). As of February 11, 2006, all servers in the irc.mixxnet.net round-robin have SSL support. The use of irc.ssl.mixxnet.net is obsolete and depreciated. Security Information When you use SSL, you are establishing a secure connection between you and the server. What some people do not realize is that when one server talks to another server, they are talking on an unencrypted line. This means that if Alice (on an SSL server) sends a message to Bob (on a non-SSL server), the message is not secure. For it to be secure, Alice and Bob both need to have SSL connections on the same server. As of February 11, 2006, all servers have SSL enabled for both clients and server-to-server links. Servers Currently, the following servers support SSL: Anjuna (6697) Ausnix (6697) Blackdiamond (6697) Cerebrum (6697) Fluxed (6697) GNS (6697) Ninjutsu (6697) Rapier (6697) Secteam (6697) Links SSL needs to be enabled on all server-to-server links as explained in the section above. Below is a list of servers who have SSL enabled for server-to-server connections. Hub2.US ausnix.qld.au.mixxnet.net anjuna.il.us.mixxnet.net blackdiamond.ny.us.mixxnet.net fluxed.il.us.mixxnet.net ninjutsu.va.us.mixxnet.net raptor.lon.uk.mixxnet.net Hub2.EU cerebrum.nl.eu.mixxnet.net gns.de.eu.mixxnet.net rapier.lon.uk.mixxnet.net secteam.no.eu.mixxnet.net User & Channel Information Identification To check to see if a user is using SSL, you whois that user. A secured user's whois would look something like: alex323 is alex@staff.mixxnet.net * Alex alex323 using ninjutsu.ca.us.mixxnet.net MIXXnet California - Hosted by Linode.com alex323 is using a Secure Connection alex323 End of /WHOIS list. This means that the user "alex323" is using SSL on ninjutsu.ca.us.mixxnet.net. Channel Protection In a secure channel, all of the users must have SSL enabled for the channel to be secure. If one user isn't secure, then all the messages will go to that user unencrypted. SSL users and non-SSL users can co-exist on the same channel. If you wish to limit your channel to only people using SSL, you need to set the channel mode +z (/mode #channel +z). The +z mode prevents non-SSL users from joining the channel. If a non-SSL user does try to join, (s)he will see this message: #channel unable to join channel (not using secure connection) Setup mIRC mIRC requires that you have the Windows version of OpenSSL installed on your system. You can download OpenSSL for Windows at this website. More information on how to install OpenSSL for Windows is beyond the scope of this document. To check if you've installed OpenSSL correctly, look for the SSL button in the mIRC Options window as shown below. Screenshot of mIRC with SSL enabled. If you have SSL enabled, choose a server from the Servers section above. Type: /server servername.xx.xx.mixnet.net +port. The '+' sign is important because it tells mIRC to use SSL. When trying to connect to a SSL enabled server, you may be presented with a dialog that says the SSL certificate is invalid. As long as the certificate has not expired and the domian name matches, the certificate is OK. The reason you are seeing this dialog is because MIXXnet signs its own SSL certificates. XChat To use SSL in XChat, click X-Chat->Server List.... Next, click on MIXXnet and Edit.. (Note: you may not have MIXXnet on your server list. If you don't, you can just click Close and type: /server servername.xx.xx.mixnet.net +port). Then select the two check boxes that say, Use SSL for all servers on this network and Accept invalid SSL certificate as shown below. Screenshot of X-Chat with SSL enabled. irssi The use of SSL in irssi is very simple. All you need to do is type the following commands into the status window: /set use_ssl on /set ssl_verify on /save After you have done these, you need to pass the -ssl flag to /connect when connecting to an SSL enabled server. For example: /connect -ssl ninjutsu.va.us.mixxnet.net 6697 Other Clients Other clients that support SSL include BitchX. Secure channels The official SSL channel of MIXXnet is #secure. You can come join us when you have SSL set up. Other secure channels include: #secure External Links OpenSSL Website Using SSL with mIRC irssi Website BitchX Website SSL Wikipedia Page Retrieved from "https://www.mixxnet.net/wiki/index.php?title=SSL&oldid=1066" View source | Discuss this page | Page history | Page information | What links here | Related changes Main Page | About MIXXnet Wiki | Find: Navigation menu Main Page | About | Help | FAQ | Log in Find Browse Main page Recent changes Random page Help This page Page Discussion History Tools What links here Related changes Special pages Printable version Permanent link Page information