|
|
|
|
3357
|
|
3357
|
|
3358
|
#+BEGIN_SRC: bash
|
3358
|
#+BEGIN_SRC: bash
|
3359
|
mkdir /home/ircserver/ircd/ssl
|
3359
|
mkdir /home/ircserver/ircd/ssl
|
3360
|
-openssl genrsa -out /home/ircserver/ircd/ssl/ircd.key 4096
|
|
|
3361
|
-openssl req -new -x509 -sha256 -key /home/ircserver/ircd/ssl/ircd.key -out /home/ircserver/ircd/ssl/ircd.pem -days 3650
|
|
|
3362
|
-#+END_SRC
|
|
|
3363
|
-
|
|
|
3364
|
-You will be asked for some details. The next step will take a few minutes to gather entropy, so go and do something else.
|
|
|
3365
|
-
|
|
|
3366
|
-#+BEGIN_SRC: bash
|
|
|
3367
|
-openssl dhparam -out /home/ircserver/ircd/ssl/dhparam.pem 1024
|
|
|
3368
|
-#+END_SRC
|
|
|
3369
|
-
|
|
|
3370
|
-Now alter the permissions on the files so that they're accessible to the /ircserver/ user:
|
|
|
3371
|
-
|
|
|
3372
|
-#+BEGIN_SRC: bash
|
|
|
3373
|
-chmod 600 /home/ircserver/ircd/ssl/ircd.key
|
|
|
3374
|
-chmod 600 /home/ircserver/ircd/ssl/ircd.pem
|
|
|
3375
|
-chmod 600 /home/ircserver/ircd/ssl/dhparam.pem
|
|
|
|
|
3360
|
+makecert ircd
|
|
|
3361
|
+mv /etc/ssl/private/ircd.key /home/ircserver/ircd/ssl/
|
|
|
3362
|
+mv /etc/ssl/certs/ircd.crt /home/ircserver/ircd/ssl/ircd.pem
|
|
|
3363
|
+mv /etc/ssl/certs/ircd.dhparam /home/ircserver/ircd/ssl/dhparam.pem
|
|
|
3364
|
+chmod 640 /home/ircserver/ircd/ssl/*
|
3376
|
chown -R ircserver:ircserver /home/ircserver/ircd
|
3365
|
chown -R ircserver:ircserver /home/ircserver/ircd
|
3377
|
chown -R ircserver:ircserver /home/ircserver/services
|
3366
|
chown -R ircserver:ircserver /home/ircserver/services
|
3378
|
#+END_SRC
|
3367
|
#+END_SRC
|
|
|
|
|
7757
|
And regenerate the IRC server keys:
|
7746
|
And regenerate the IRC server keys:
|
7758
|
|
7747
|
|
7759
|
#+BEGIN_SRC: bash
|
7748
|
#+BEGIN_SRC: bash
|
7760
|
-openssl genrsa -out /home/ircserver/ircd/ssl/ircd.key 4096
|
|
|
7761
|
-openssl req -new -x509 -sha256 -key /home/ircserver/ircd/ssl/ircd.key -out /home/ircserver/ircd/ssl/ircd.pem -days 3650
|
|
|
7762
|
-openssl dhparam -out /home/ircserver/ircd/ssl/dhparam.pem 1024
|
|
|
|
|
7749
|
+makecert ircd
|
|
|
7750
|
+mv /etc/ssl/private/ircd.key /home/ircserver/ircd/ssl/
|
|
|
7751
|
+mv /etc/ssl/certs/ircd.crt /home/ircserver/ircd/ssl/ircd.pem
|
|
|
7752
|
+mv /etc/ssl/certs/ircd.dhparam /home/ircserver/ircd/ssl/dhparam.pem
|
|
|
7753
|
+chmod 640 /home/ircserver/ircd/ssl/*
|
|
|
7754
|
+chown -R ircserver:ircserver /home/ircserver/ircd
|
|
|
7755
|
+chown -R ircserver:ircserver /home/ircserver/services
|
7763
|
#+END_SRC
|
7756
|
#+END_SRC
|
7764
|
|
7757
|
|
7765
|
This will take a few minutes to gather entropy.
|
7758
|
This will take a few minutes to gather entropy.
|