Skip to main content

Certfp (sasl external)

For ``SASL EXTERNAL`` to work one must connect over TLS.

Create a self-signed cert

  • This requires the `openssl` utility.
  • One can then generate the cert as follows
    • openssl req -x509 -new -newkey rsa:4096 -sha256 -days 1096 -nodes -out libcasa.pem -keyout libcasa.pem
    • You shall be prompted for a number of fields to be entered, they do not matter except that 1 field must be filled for the command to succeeed.
  • Note: "the ``.pem`` file will be the same access as ones nickserv some pls set sane permissions.