Certfp (sasl external)

For ``SASL EXTERNAL`` to work one must connect over TLS.

Create a self-signed cert

• This requires the `openssl` utility.
• One can then generate the cert as follows

  • openssl req -x509 -new -newkey rsa:4096 -sha256 -days 1096 -nodes -out libcasa.pem -keyout libcasa.pem

  • You shall be prompted for a number of fields to be entered, they do not matter except that 1 field must be filled for the command to succeeed.
• Note: "the ``.pem`` file will be the same access as ones nickserv some pls set sane permissions.