Re: [tor-talk] can't enable SSL with IRSSI over TOR
On 5/6/12, Shane wrote: > I hope this is the right list for this. I am trying to get setup to > freenode and have irssi sasl'd over tor, but I can't seem to get this > enabled with SSL. I've tried using torsocks and socat. Does Freenode's hidden service support SSL? Does it support SSL on port 6697? Robert Ransom ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] can't enable SSL with IRSSI over TOR
> Does Freenode's hidden service support SSL? Does it support SSL on port 6697? > Yes it does. 6697, 7000, 7070 that I know of ... These are my latest tries. // /etc/tor/torrc User tor PIDFile /var/run/tor/tor.pid Log notice syslog DataDirectory /var/lib/tor/data # tried these as well #HiddenServiceDir /var/log/tor/hidden_service #HiddenServicePort 7000 127.0.0.1:7000 ### Freenode mapaddress 10.40.40.40 p4fsi4ockecnea7l.onion // .irssi/config { address = "p4fsi4ockecnea7l.onion"; chatnet = "freenode-tor"; port = "7000"; use_ssl = "yes"; ssl_verify = "yes"; ssl_capath = "/etc/ssl/certs"; autoconnect = "yes"; } // usewithtor irssi 01:22 Math::BigInt: couldn't load specified math lib(s), fallback to Math::BigInt::FastCalc at /usr/lib64/perl5/vendor_perl/5.12.4/Crypt/DH.pm line 6 01:22 01:22 -!- Irssi: SASL: auth loaded from /home/me/.irssi/sasl.auth 01:23 -!- Irssi: Server p4fsi4ockecnea7l.onion saved 01:23 -!- Irssi: Saved configuration to file /home/me/.irssi/config 01:23 -!- Irssi: Theme saved to /home/me/.irssi/default.theme 01:23 -!- Irssi: Looking up p4fsi4ockecnea7l.onion 01:23 -!- Irssi: Connecting to p4fsi4ockecnea7l.onion [127.0.69.0] port 7000 01:23 -!- Irssi: warning SSL handshake failed: Connection refused 01:23 -!- Irssi: Connection lost to p4fsi4ockecnea7l.onion ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] can't enable SSL with IRSSI over TOR
On 06/05/12 08:19, Shane wrote: >> Does Freenode's hidden service support SSL? Does it support SSL on port >> 6697? >> > > Yes it does. 6697, 7000, 7070 that I know of ... These are my latest tries. There's no point in adding a layer of SSL over hidden services; the connection is already encrypted end to end. -- Mike Cardwell https://grepular.com/ http://cardwellit.com/ OpenPGP Key35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F XMPP OTR Key 8924 B06A 7917 AAF3 DBB1 BF1B 295C 3C78 3EF1 46B4 signature.asc Description: OpenPGP digital signature ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] can't enable SSL with IRSSI over TOR
> There's no point in adding a layer of SSL over hidden services; the > connection is already encrypted end to end. > I thought it was more like proxy-to-proxy leaving a small in-the-clear gaps on the ends. ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] can't enable SSL with IRSSI over TOR
On 06/05/12 18:02, Shane wrote: >> There's no point in adding a layer of SSL over hidden services; the >> connection is already encrypted end to end. > > I thought it was more like proxy-to-proxy leaving a small in-the-clear > gaps on the ends. I guess so. There's a chance that the Tor daemon is running on a different machine to the IRC server and somewhere between those two machines the network is compromised. -- Mike Cardwell https://grepular.com/ http://cardwellit.com/ OpenPGP Key35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F XMPP OTR Key 8924 B06A 7917 AAF3 DBB1 BF1B 295C 3C78 3EF1 46B4 signature.asc Description: OpenPGP digital signature ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
Re: [tor-talk] can't enable SSL with IRSSI over TOR
Shane wrote: > I thought it was more like proxy-to-proxy leaving a small in-the-clear > gaps on the ends. No, it's end-to-proxy for the regular Internet (where exit nodes may be able to see your traffic) and end-to-end for hidden services. -- Simon Nicolussi, http://www.sinic.name/ pgp7cNkI1Nrve.pgp Description: PGP signature ___ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk