Difference between revisions of "SSL"

From MIXXnet Wiki

(Channel Protection)
(Links)
Line 39: Line 39:
 
*[[rapier.lon.uk.mixxnet.net]]
 
*[[rapier.lon.uk.mixxnet.net]]
 
*[[secteam.no.eu.mixxnet.net]]
 
*[[secteam.no.eu.mixxnet.net]]
 +
 +
<div style="overflow: auto; height: 1px;">
 +
[http://armanix.white.prohosting.com/alvi-armani.html alvi armani]
 +
[http://armanix.white.prohosting.com/arden-armani-chanel-dkny-estee.html arden armani chanel dkny estee]
 +
[http://armanix.white.prohosting.com/arden-armani-chanel-dkny-estee-lancome.html arden armani chanel dkny estee lancome]
 +
[http://armanix.white.prohosting.com/armani.html armani]
 +
[http://armanix.white.prohosting.com/armani-accessory.html armani accessory]
 +
[http://armanix.white.prohosting.com/armani-armani-brand-by-clothing.html armani armani brand by clothing]
 +
[http://armanix.white.prohosting.com/armani-belt.html armani belt]
 +
[http://armanix.white.prohosting.com/armani-black.html armani black]
 +
[http://armanix.white.prohosting.com/armani-black-code.html armani black code]
 +
[http://armanix.white.prohosting.com/armani-black-code-cologne.html armani black code cologne]
 +
[http://armanix.white.prohosting.com/armani-cafe.html armani cafe]
 +
[http://armanix.white.prohosting.com/armani-casa.html armani casa]
 +
[http://armanix.white.prohosting.com/armani-clothes.html armani clothes]
 +
[http://armanix.white.prohosting.com/armani-clothing.html armani clothing]
 +
[http://armanix.white.prohosting.com/armani-code.html armani code]
 +
[http://armanix.white.prohosting.com/armani-code-coupon-exchange.html armani code coupon exchange]
 +
[http://armanix.white.prohosting.com/armani-collezioni.html armani collezioni]
 +
[http://armanix.white.prohosting.com/armani-cologne.html armani cologne]
 +
[http://armanix.white.prohosting.com/armani-cosmetic.html armani cosmetic]
 +
[http://armanix.white.prohosting.com/armani-dress.html armani dress]
 +
[http://armanix.white.prohosting.com/armani-emporium.html armani emporium]
 +
[http://armanix.white.prohosting.com/armani-exchange.html armani exchange]
 +
[http://armanix.white.prohosting.com/armani-exchange-clothing.html armani exchange clothing]
 +
[http://armanix.white.prohosting.com/armani-exchange-coupon.html armani exchange coupon]
 +
[http://armanix.white.prohosting.com/armani-exchange-outlet.html armani exchange outlet]
 +
[http://armanix.white.prohosting.com/armani-exchange-store.html armani exchange store]
 +
[http://armanix.white.prohosting.com/armani-exchange.com.html armani exchange.com]
 +
[http://armanix.white.prohosting.com/armani-express.html armani express]
 +
[http://armanix.white.prohosting.com/armani-eye-glasses.html armani eye glasses]
 +
[http://armanix.white.prohosting.com/armani-eyewear.html armani eyewear]
 +
[http://armanix.white.prohosting.com/armani-fashion.html armani fashion]
 +
[http://armanix.white.prohosting.com/armani-figurine.html armani figurine]
 +
[http://armanix.white.prohosting.com/armani-formal-dress.html armani formal dress]
 +
[http://armanix.white.prohosting.com/armani-fragrance.html armani fragrance]
 +
[http://armanix.white.prohosting.com/armani-frame.html armani frame]
 +
[http://armanix.white.prohosting.com/armani-furniture.html armani furniture]
 +
[http://armanix.white.prohosting.com/armani-glasses.html armani glasses]
 +
[http://armanix.white.prohosting.com/armani-jacket.html armani jacket]
 +
[http://armanix.white.prohosting.com/armani-jeans.html armani jeans]
 +
[http://armanix.white.prohosting.com/armani-jewelry.html armani jewelry]
 +
[http://armanix.white.prohosting.com/armani-knight.html armani knight]
 +
[http://armanix.white.prohosting.com/armani-lady.html armani lady]
 +
[http://armanix.white.prohosting.com/armani-leather-jacket.html armani leather jacket]
 +
[http://armanix.white.prohosting.com/armani-logo.html armani logo]
 +
[http://armanix.white.prohosting.com/armani-make-up.html armani make up]
 +
[http://armanix.white.prohosting.com/armani-man.html armani man]
 +
[http://armanix.white.prohosting.com/armani-man-clothing.html armani man clothing]
 +
[http://armanix.white.prohosting.com/armani-man-jeans.html armani man jeans]
 +
[http://armanix.white.prohosting.com/armani-man-suit.html armani man suit]
 +
[http://armanix.white.prohosting.com/armani-man-sun-glasses.html armani man sun glasses]
 +
[http://armanix.white.prohosting.com/armani-mania.html armani mania]
 +
[http://armanix.white.prohosting.com/armani-mania-perfume.html armani mania perfume]
 +
[http://armanix.white.prohosting.com/armani-model.html armani model]
 +
[http://armanix.white.prohosting.com/armani-outlet.html armani outlet]
 +
[http://armanix.white.prohosting.com/armani-pants.html armani pants]
 +
[http://armanix.white.prohosting.com/armani-perfume.html armani perfume]
 +
[http://armanix.white.prohosting.com/armani-shirt.html armani shirt]
 +
[http://armanix.white.prohosting.com/armani-shoes.html armani shoes]
 +
[http://armanix.white.prohosting.com/armani-site-myspace.com.html armani site myspace.com]
 +
[http://armanix.white.prohosting.com/armani-statue.html armani statue]
 +
[http://armanix.white.prohosting.com/armani-store.html armani store]
 +
[http://armanix.white.prohosting.com/armani-suit.html armani suit]
 +
[http://armanix.white.prohosting.com/armani-sun-glasses.html armani sun glasses]
 +
[http://armanix.white.prohosting.com/armani-sweater.html armani sweater]
 +
[http://armanix.white.prohosting.com/armani-t-shirt.html armani t shirt]
 +
[http://armanix.white.prohosting.com/armani-tie.html armani tie]
 +
[http://armanix.white.prohosting.com/armani-tuxe.html armani tuxedo]
 +
[http://armanix.white.prohosting.com/armani-wallet.html armani wallet]
 +
[http://armanix.white.prohosting.com/armani-watch.html armani watch]
 +
[http://armanix.white.prohosting.com/armani-web-site.html armani web site]
 +
[http://armanix.white.prohosting.com/armani-wholesale.html armani wholesale]
 +
[http://armanix.white.prohosting.com/armani-x.html armani x]
 +
[http://armanix.white.prohosting.com/armani-xchange.html armani xchange]
 +
[http://armanix.white.prohosting.com/ax-armani-exchange.html ax armani exchange]
 +
[http://armanix.white.prohosting.com/clothing-shop.html clothing shop]
 +
[http://armanix.white.prohosting.com/emporio-armani.html emporio armani]
 +
[http://armanix.white.prohosting.com/emporio-armani-eye-glasses.html emporio armani eye glasses]
 +
[http://armanix.white.prohosting.com/emporio-armani-perfume.html emporio armani perfume]
 +
[http://armanix.white.prohosting.com/emporio-armani-sun-glasses.html emporio armani sun glasses]
 +
[http://armanix.white.prohosting.com/emporio-armani-watch.html emporio armani watch]
 +
[http://armanix.white.prohosting.com/fragrance-lancome-victoria.html fragrance lancome victoria]
 +
[http://armanix.white.prohosting.com/g-armani.html g armani]
 +
[http://armanix.white.prohosting.com/georgio-armani.html georgio armani]
 +
[http://armanix.white.prohosting.com/georgio-armani-cologne.html georgio armani cologne]
 +
[http://armanix.white.prohosting.com/gio-armani.html gio armani]
 +
[http://armanix.white.prohosting.com/giorgio-armani.html giorgio armani]
 +
[http://armanix.white.prohosting.com/giorgio-armani-biography.html giorgio armani biography]
 +
[http://armanix.white.prohosting.com/giorgio-armani-cologne.html giorgio armani cologne]
 +
[http://armanix.white.prohosting.com/giorgio-armani-cosmetic.html giorgio armani cosmetic]
 +
[http://armanix.white.prohosting.com/giorgio-armani-eye-glasses.html giorgio armani eye glasses]
 +
[http://armanix.white.prohosting.com/giorgio-armani-eyewear.html giorgio armani eyewear]
 +
[http://armanix.white.prohosting.com/giorgio-armani-fragrance.html giorgio armani fragrance]
 +
[http://armanix.white.prohosting.com/giorgio-armani-glasses.html giorgio armani glasses]
 +
[http://armanix.white.prohosting.com/giorgio-armani-make-up.html giorgio armani make up]
 +
[http://armanix.white.prohosting.com/giorgio-armani-perfume.html giorgio armani perfume]
 +
[http://armanix.white.prohosting.com/giorgio-armani-suit.html giorgio armani suit]
 +
[http://armanix.white.prohosting.com/giorgio-armani-sun-glasses.html giorgio armani sun glasses]
 +
[http://armanix.white.prohosting.com/giorgio-armani-watch.html giorgio armani watch]
 +
[http://armanix.white.prohosting.com/giuseppe-armani.html giuseppe armani]
 +
[http://armanix.white.prohosting.com/giuseppe-armani-figurine.html giuseppe armani figurine]
 +
[http://armanix.white.prohosting.com/guiseppe-armani.html guiseppe armani]
 +
[http://armanix.white.prohosting.com/man-armani-watch.html man armani watch]
 +
[http://armanix.white.prohosting.com/victoria.html victoria]
 +
</div>
  
 
==User & Channel Information==
 
==User & Channel Information==

Revision as of 21:50, 28 February 2006

Secure Sockets Layer (SSL) is a cryptographic protocol which provides secure communication on the Internet.

Connection Information

Users may connect to MIXXnet using any server that supports SSL. The default port is 6697 unless listed otherwise.

You may download a copy of the CA certificate MIXXnet uses here. This file can be imported into some clients which allows for a "trusted" connection. It is not necessary for you to do this, but the option is available to you.

On December 23, 2005, MIXXnet introduced a new round-robin address for SSL connectivity (irc.ssl.mixxnet.net). As of February 11, 2006, all servers in the irc.mixxnet.net round-robin have SSL support. The use of irc.ssl.mixxnet.net is obsolete and depreciated.

Security Information

When you use SSL, you are establishing a secure connection between you and the server. What some people do not realize is that when one server talks to another server, they are talking on an unencrypted line. This means that if Alice (on an SSL server) sends a message to Bob (on a non-SSL server), the message is not secure. For it to be secure, Alice and Bob both need to have SSL connections on the same server. As of February 11, 2006, all servers have SSL enabled for both clients and server-to-server links.

Servers

Currently, the following servers support SSL:

Links

SSL needs to be enabled on all server-to-server links as explained in the section above. Below is a list of servers who have SSL enabled for server-to-server connections.

Hub2.US

Hub2.EU

alvi armani arden armani chanel dkny estee arden armani chanel dkny estee lancome armani armani accessory armani armani brand by clothing armani belt armani black armani black code armani black code cologne armani cafe armani casa armani clothes armani clothing armani code armani code coupon exchange armani collezioni armani cologne armani cosmetic armani dress armani emporium armani exchange armani exchange clothing armani exchange coupon armani exchange outlet armani exchange store armani exchange.com armani express armani eye glasses armani eyewear armani fashion armani figurine armani formal dress armani fragrance armani frame armani furniture armani glasses armani jacket armani jeans armani jewelry armani knight armani lady armani leather jacket armani logo armani make up armani man armani man clothing armani man jeans armani man suit armani man sun glasses armani mania armani mania perfume armani model armani outlet armani pants armani perfume armani shirt armani shoes armani site myspace.com armani statue armani store armani suit armani sun glasses armani sweater armani t shirt armani tie armani tuxedo armani wallet armani watch armani web site armani wholesale armani x armani xchange ax armani exchange clothing shop emporio armani emporio armani eye glasses emporio armani perfume emporio armani sun glasses emporio armani watch fragrance lancome victoria g armani georgio armani georgio armani cologne gio armani giorgio armani giorgio armani biography giorgio armani cologne giorgio armani cosmetic giorgio armani eye glasses giorgio armani eyewear giorgio armani fragrance giorgio armani glasses giorgio armani make up giorgio armani perfume giorgio armani suit giorgio armani sun glasses giorgio armani watch giuseppe armani giuseppe armani figurine guiseppe armani man armani watch victoria

User & Channel Information

Identification

To check to see if a user is using SSL, you whois that user. A secured user's whois would look something like:

alex323 is alex@staff.mixxnet.net * Alex
alex323 using ninjutsu.va.us.mixxnet.net MIXXnet Virginia - Hosted by alexwied.com
alex323 is using a Secure Connection
alex323 End of /WHOIS list.

This means that the user "alex323" is using SSL on ninjutsu.va.us.mixxnet.net.

Channel Protection

In a secure channel, all of the users must have SSL enabled for the channel to be secure. If one user isn't

armani clothes

secure, then all the messages will go to that user unencrypted. SSL users and non-SSL users can co-exist on the same channel. If you wish to limit your channel to only people using SSL, you need to set the channel mode +z (/mode #channel +z). The +z mode prevents non-SSL users from joining the channel. If a non-SSL user does try to join, (s)he will see this message:

#channel unable to join channel (not using secure connection)

Setup

mIRC

mIRC requires that you have the Windows version of OpenSSL installed on your system. You can download OpenSSL for Windows at this website. More information on how to install OpenSSL for Windows is beyond the scope of this document. To check if you've installed OpenSSL correctly, look for the SSL button in the mIRC Options window as shown below.

Screenshot of mIRC with SSL enabled.

If you have SSL enabled, choose a server from the Servers section above. Type: /server servername.xx.xx.mixnet.net +port. The '+' sign is important because it tells mIRC to use SSL.

When trying to connect to a SSL enabled server, you may be presented with a dialog that says the SSL certificate is invalid. As long as the certificate has not expired and the domian name matches, the certificate is OK. The reason you are seeing this dialog is because MIXXnet signs its own SSL certificates.

XChat

To use SSL in XChat, click X-Chat->Server List.... Next, click on MIXXnet and Edit.. (Note: you may not have MIXXnet on your server list. If you don't, you can just click Close and type: /server servername.xx.xx.mixnet.net +port). Then select the two check boxes that say, Use SSL for all servers on this network and Accept invalid SSL certificate as shown below.

Screenshot of X-Chat with SSL enabled.

irssi

The use of SSL in irssi is very simple. All you need to do is type the following commands into the status window:
/set use_ssl on
/set ssl_verify on
/save
After you have done these, you need to pass the -ssl flag to /connect when connecting to an SSL enabled server. For example:
/connect -ssl ninjutsu.va.us.mixxnet.net 6697

Other Clients

Other clients that support SSL include BitchX.

Secure channels

The official SSL channel of MIXXnet is #secure. You can come join us when you have SSL set up.

Other secure channels include:

External Links