Re: [tor-talk] can't enable SSL with IRSSI over TOR
On 5/6/12, Shane wrote: > I hope this is the right list for this. I am trying to get setup to > freenode and have irssi sasl'd over tor, but I can't seem to get this > enabled with SSL. I've tried using torsocks and socat. Does Freenode's hidden service support SSL? Does it support SSL on port 6697? Robert Ransom ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] can't enable SSL with IRSSI over TOR
> Does Freenode's hidden service support SSL? Does it support SSL on port 6697?
>
Yes it does. 6697, 7000, 7070 that I know of ... These are my latest tries.
// /etc/tor/torrc
User tor
PIDFile /var/run/tor/tor.pid
Log notice syslog
DataDirectory /var/lib/tor/data
# tried these as well
#HiddenServiceDir /var/log/tor/hidden_service
#HiddenServicePort 7000 127.0.0.1:7000
### Freenode
mapaddress 10.40.40.40 p4fsi4ockecnea7l.onion
// .irssi/config
{
address = "p4fsi4ockecnea7l.onion";
chatnet = "freenode-tor";
port = "7000";
use_ssl = "yes";
ssl_verify = "yes";
ssl_capath = "/etc/ssl/certs";
autoconnect = "yes";
}
// usewithtor irssi
01:22 Math::BigInt: couldn't load specified math lib(s), fallback to
Math::BigInt::FastCalc at
/usr/lib64/perl5/vendor_perl/5.12.4/Crypt/DH.pm line 6
01:22
01:22 -!- Irssi: SASL: auth loaded from /home/me/.irssi/sasl.auth
01:23 -!- Irssi: Server p4fsi4ockecnea7l.onion saved
01:23 -!- Irssi: Saved configuration to file /home/me/.irssi/config
01:23 -!- Irssi: Theme saved to /home/me/.irssi/default.theme
01:23 -!- Irssi: Looking up p4fsi4ockecnea7l.onion
01:23 -!- Irssi: Connecting to p4fsi4ockecnea7l.onion [127.0.69.0] port 7000
01:23 -!- Irssi: warning SSL handshake failed: Connection refused
01:23 -!- Irssi: Connection lost to p4fsi4ockecnea7l.onion
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] can't enable SSL with IRSSI over TOR
On 06/05/12 08:19, Shane wrote: >> Does Freenode's hidden service support SSL? Does it support SSL on port >> 6697? >> > > Yes it does. 6697, 7000, 7070 that I know of ... These are my latest tries. There's no point in adding a layer of SSL over hidden services; the connection is already encrypted end to end. -- Mike Cardwell https://grepular.com/ http://cardwellit.com/ OpenPGP Key35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F XMPP OTR Key 8924 B06A 7917 AAF3 DBB1 BF1B 295C 3C78 3EF1 46B4 signature.asc Description: OpenPGP digital signature ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] can't enable SSL with IRSSI over TOR
> There's no point in adding a layer of SSL over hidden services; the > connection is already encrypted end to end. > I thought it was more like proxy-to-proxy leaving a small in-the-clear gaps on the ends. ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] can't enable SSL with IRSSI over TOR
On 06/05/12 18:02, Shane wrote: >> There's no point in adding a layer of SSL over hidden services; the >> connection is already encrypted end to end. > > I thought it was more like proxy-to-proxy leaving a small in-the-clear > gaps on the ends. I guess so. There's a chance that the Tor daemon is running on a different machine to the IRC server and somewhere between those two machines the network is compromised. -- Mike Cardwell https://grepular.com/ http://cardwellit.com/ OpenPGP Key35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F XMPP OTR Key 8924 B06A 7917 AAF3 DBB1 BF1B 295C 3C78 3EF1 46B4 signature.asc Description: OpenPGP digital signature ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] can't enable SSL with IRSSI over TOR
Shane wrote: > I thought it was more like proxy-to-proxy leaving a small in-the-clear > gaps on the ends. No, it's end-to-proxy for the regular Internet (where exit nodes may be able to see your traffic) and end-to-end for hidden services. -- Simon Nicolussi, http://www.sinic.name/ pgp7cNkI1Nrve.pgp Description: PGP signature ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
