Skip to content

Commit d7cdb30

Browse files
Update doc firststeps - fingerprint and nickserv magick
1 parent 7e603e4 commit d7cdb30

File tree

1 file changed

+10
-2
lines changed

1 file changed

+10
-2
lines changed

doc/sphinx_source/tutorials/firststeps.rst

+10-2
Original file line numberDiff line numberDiff line change
@@ -150,13 +150,17 @@ Simple Authentication and Security Layer (SASL) is becoming a prevalant method o
150150

151151
* **PLAIN**: To use this method, set sasl-mechanism to 0. This method passes the username and password (set in the sasl-username and sasl-password config file settings) to the IRC server in plaintext. If you only connect to the IRC server using a connection protected by SSL/TLS this is a generally safe method of authentication; however you probably want to avoid this method if you connect to a server on a non-protected port as the exchange itself is not encrypted.
152152

153-
* **ECDSA-NIST256P-CHALLENGE**: To use this method, set sasl-mechanism to 1. This method uses a public/private keypair to authenticate, so no username/password is required. Not all servers support this method. If your server does support this, you you must generate a certificate pair using::
153+
* **ECDSA-NIST256P-CHALLENGE**: To use this method, set sasl-mechanism to 1. This method uses a public/private keypair to authenticate, so no username/password is required. Not all servers support this method. If your server does support this, you must generate a certificate pair using::
154154

155155
openssl ecparam -genkey -name prime256v1 -out eggdrop-ecdsa.pem
156156

157157
You will need to determine your public key fingerprint by using::
158158

159-
openssl ec -noout -text -conv_form compressed -in eggdrop-ecdsa.pem | grep '^pub:' -A 3 | tail -n 3 | tr -d ' \n:' | xxd -r -p | base64
159+
openssl ec -noout -text -conv_form compressed -in eggdrop-ecdsa.pem 2>/dev/null | grep '^pub:' -A 3 | tail -n 3 | tr -d ' \n:' | xxd -r -p | base64
160+
161+
If error "xxd: command not found" you could install vim, because xxd is a part of vim, or you could try python::
162+
163+
openssl ec -noout -text -conv_form compressed -in eggdrop-ecdsa.pem 2>/dev/null| grep '^pub:' -A 3 | tail -n 3 | tr -d ' \n:' | python -c "import base64,sys;print(base64.b64encode(bytearray.fromhex(sys.stdin.readline())).decode())"
160164

161165
Then, authenticate with your NickServ service and register your public certificate with NickServ. You can view your public key On Libera for example, it is done by::
162166

@@ -173,3 +177,7 @@ You will need to determine your public key fingerprint by using::
173177
Then, ensure you have those keys loaded in the ssl-privatekey and ssl-certificate settings in the config file. Finally, to add this certificate to your NickServ account, type::
174178

175179
/msg NickServ cert add <fingerprint string from above goes here>
180+
181+
Alternatively you could connect via ssl and if NickServ supports it, make it automatically determine and add your fingerprint in just the right format:
182+
183+
/msg NickServ cert add

0 commit comments

Comments
 (0)