SSL CA import instructions - Revision history

Siiw: /* irssi */

2014-03-03T18:40:07Z

‎irssi

Unknown Entity: updated screenshot links to work again

2013-03-18T21:37:21Z

updated screenshot links to work again

FiXato: Added reference to our CA cert.

2011-09-21T21:05:57Z

Added reference to our CA cert.

FiXato: Added reference to our CA cert.

2011-09-21T21:05:38Z

Added reference to our CA cert.

FiXato: /* weechat */

2011-09-21T21:01:58Z

‎weechat

FiXato: /* Windows builds */

2011-09-21T20:58:37Z

‎Windows builds

FiXato: /* mIRC */

2011-09-21T20:58:07Z

‎mIRC

FiXato: /* Windows builds */ updated the screenshot description

2011-09-21T20:57:11Z

‎Windows builds: updated the screenshot description

FiXato: /* mIRC */ updated the CA certificate location.

2011-09-21T20:52:21Z

‎mIRC: updated the CA certificate location.

Unknown Entity at 01:31, 17 February 2011

2011-02-17T01:31:30Z

@@ Line 49: / Line 49: @@
 #[[#CA_download|Download the certificate]] to ~/.irssi/chat4all-ca.pem
 #Add ''-ssl_cafile ~/.irssi/chat4all-ca.pem'' to your irssi server configuration:
-   /server add -auto -ssl -ssl_cafile ~/.irsi/chat4all-ca.pem -network Chat4All irc.chat4all.org 7001
+   /server add -auto -ssl -ssl_cafile ~/.irssi/chat4all-ca.pem -network Chat4All irc.chat4all.org 7001
 #Connect to the network/server:
    /connect irc.chat4all.org

@@ Line 7: / Line 7: @@
 =mIRC=
-Screenshot for reference: http://vbprog.fixato.net/ss/irc/mirc_ca.PNG
+Screenshot for reference: http://vbprog.zonexus.net/ss/irc/mirc_ca.PNG
 #[[#CA_download|Download the certificate]]
 #Save it somewhere you can easily find it. 'My Documents' or the mIRC directory are good options.
@@ Line 20: / Line 20: @@
 [[#CA_download|Download the certificate]], then follow the directions specific to your OS.<br />
 ==Windows builds==
-Screenshot for reference: http://vbprog.fixato.net/ss/irc/xchat_ca.PNG
+Screenshot for reference: http://vbprog.zonexus.net/ss/irc/xchat_ca.PNG
 #Save the CA certificate somewhere you can easily find (''%appdata%\X-Chat 2'' or ''My Documents'' are good choices)
 #Right click My Computer and hit Properties. Go to the Advanced tab and hit Environment Variables.

@@ Line 2: / Line 2: @@
 This article describes in detail how you can import our Certificate Authority Certificate into your IRC client. If the client you are using is not listed, please contact us in #help and we'll see if we can find out how to import it for you.
-=CA Download=
+=CA download=
 You can download the CA certificate from [https://www.chat4all.org/ircd-certificates/index.html our secure website].
 This should link you to https://www.chat4all.org/ircd-certificates/chat4all-ca.pem

@@ Line 1: / Line 1: @@
 [[Category:EN]]
 This article describes in detail how you can import our Certificate Authority Certificate into your IRC client. If the client you are using is not listed, please contact us in #help and we'll see if we can find out how to import it for you.
 =mIRC=
 Screenshot for reference: http://vbprog.fixato.net/ss/irc/mirc_ca.PNG
-#Download the CA certificate from [https://www.chat4all.org/ircd-certificates/index.html our secure website].
+#[[#CA_download|Download the certificate]]
 #Save it somewhere you can easily find it. 'My Documents' or the mIRC directory are good options.
 #If you are already using a trusted authorities file for one or more different networks, then you need to [[#Append_CAs_in_Windows|append the downloaded certificate]] to the existing trusted authorities file. If you need a reminder on where this file is located; the trusted authorities button has the path in it.
@@ Line 14: / Line 18: @@
 =Xchat=
 Note: Xchat does not have an in-client method for checking CAs; it uses OpenSSL's paths to read CAs. See [http://forum.xchat.org/viewtopic.php?f=2&t=5529] for the source of this information.
-Download the certificate, then follow the directions specific to your OS.<br />
+[[#CA_download|Download the certificate]], then follow the directions specific to your OS.<br />
 ==Windows builds==
 Screenshot for reference: http://vbprog.fixato.net/ss/irc/xchat_ca.PNG
@@ Line 28: / Line 32: @@
 ==Linux builds==
-#Install the certificate to the '''certs''' directory in the location given by openssl version -d and Xchat should pick it up.
+#Install the [[#CA_download|the certificate]] to the '''certs''' directory in the location given by openssl version -d and Xchat should pick it up.
 #There seems to be no way to do this on a per-user basis so that root access is not required (or at least I cannot find it)
 =weechat=
-#Locate your current trusted authorities file in weechat:
+#Locate your current '''trusted authorities file''' in WeeChat:
    /set weechat.network.gnutls_ca_file
 #This will probably mention ''"%h/ssl/CAs.pem"'', which means it's stored in ''ssl/CAs.pem'' in the weechat homedir (''~/.weechat'' by default)
@@ Line 43: / Line 47: @@
 =irssi=
-#Download our CA certificate file to ~/.irssi/ca.cert.pem
+#[[#CA_download|Download the certificate]] to ~/.irssi/chat4all-ca.pem
-#Add ''-ssl_cafile ~/.irssi/ca.cert.pem'' to your irssi server configuration:
+#Add ''-ssl_cafile ~/.irssi/chat4all-ca.pem'' to your irssi server configuration:
-   /server add -auto -ssl -ssl_cafile ~/.irsi/ca.cert.pem -network Chat4All irc.chat4all.org 7001
+   /server add -auto -ssl -ssl_cafile ~/.irsi/chat4all-ca.pem -network Chat4All irc.chat4all.org 7001
 #Connect to the network/server:
    /connect irc.chat4all.org
@@ Line 65: / Line 69: @@
 If you have CAs from other networks (like Freenode), you can append our CA Certificate to the existing file.
-Assume our CA certificate is called ''ca.cert.pem'', the existing trusted certificate authorities file is called ''CAs.pem'' and they are both in the same directory.
+Assume our CA certificate is called ''chat4all-ca.pem'', the existing trusted certificate authorities file is called ''CAs.pem'' and they are both in the same directory.
 Execute the following commands:
@@ Line 72: / Line 76: @@
    #Concatenate our certificate into the existing trusted certificates authorities
-   cat ca.cert.pem >> CAs.pem
+   cat chat4all-ca.pem >> CAs.pem

@@ Line 32: / Line 32: @@
 =weechat=
-#Locate your current trusted authorities file in weechat: /set weechat.network.gnutls_ca_file
+#Locate your current trusted authorities file in weechat:
 #This will probably mention ''"%h/ssl/CAs.pem"'', which means it's stored in ''ssl/CAs.pem'' in the weechat homedir (''~/.weechat'' by default)
-#Download the certificate
+#[[#CA_download|Download the certificate]]
 #Save it in ''~/.weechat/ssl/CAs.pem'' or [[#Append_CAs_in_Linux|append it to this file]]
 #Set the ''ssl_verify'' option for your Chat4All server entry to "on":
    /set irc.server.Chat4All.ssl_verify on
-Now you should be able to connect to our SSL enabled ports without problems. You might need to restart your weechat before it uses the new certificates authorities file.
+Now you should be able to connect to our SSL enabled ports without problems.
 =irssi=

@@ Line 16: / Line 16: @@
 Download the certificate, then follow the directions specific to your OS.<br />
 ==Windows builds==
 #Save the CA certificate somewhere you can easily find (''%appdata%\X-Chat 2'' or ''My Documents'' are good choices)
 #Right click My Computer and hit Properties. Go to the Advanced tab and hit Environment Variables.
@@ Line 22: / Line 23: @@
 ##Value: C:\Path\Where\You\Saved\Your\Cert.pem
 It is recommended to reload Xchat since you are modifying an environment variable, and you should no longer see this:
    * * Verify E: unable to get local issuer certificate.? (20)

← Older revision		Revision as of 01:31, 17 February 2011
Line 1:		Line 1:
		+	[[Category:EN]]
	This article describes in detail how you can import our Certificate Authority Certificate into your IRC client. If the client you are using is not listed, please contact us in #help and we'll see if we can find out how to import it for you.		This article describes in detail how you can import our Certificate Authority Certificate into your IRC client. If the client you are using is not listed, please contact us in #help and we'll see if we can find out how to import it for you.