Re: [tor-talk] can't enable SSL with IRSSI over TOR

2012-05-06 Thread Robert Ransom
On 5/6/12, Shane software.research.developm...@gmail.com wrote:
 I hope this is the right list for this. I am trying to get setup to
 freenode and have irssi sasl'd over tor, but I can't seem to get this
 enabled with SSL. I've tried using torsocks and socat.

Does Freenode's hidden service support SSL?  Does it support SSL on port 6697?


Robert Ransom
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] can't enable SSL with IRSSI over TOR

2012-05-06 Thread Shane
 Does Freenode's hidden service support SSL?  Does it support SSL on port 6697?


Yes it does. 6697, 7000, 7070 that I know of ... These are my latest tries.


// /etc/tor/torrc
User tor
PIDFile /var/run/tor/tor.pid
Log notice syslog
DataDirectory /var/lib/tor/data

# tried these as well
#HiddenServiceDir /var/log/tor/hidden_service
#HiddenServicePort 7000 127.0.0.1:7000

### Freenode
mapaddress 10.40.40.40 p4fsi4ockecnea7l.onion


// .irssi/config
  {
address = p4fsi4ockecnea7l.onion;
chatnet = freenode-tor;
port = 7000;
use_ssl = yes;
ssl_verify = yes;
ssl_capath = /etc/ssl/certs;
autoconnect = yes;
  }


// usewithtor irssi
01:22 Math::BigInt: couldn't load specified math lib(s), fallback to
  Math::BigInt::FastCalc at
  /usr/lib64/perl5/vendor_perl/5.12.4/Crypt/DH.pm line 6
01:22
01:22 -!- Irssi: SASL: auth loaded from /home/me/.irssi/sasl.auth
01:23 -!- Irssi: Server p4fsi4ockecnea7l.onion saved
01:23 -!- Irssi: Saved configuration to file /home/me/.irssi/config
01:23 -!- Irssi: Theme saved to /home/me/.irssi/default.theme
01:23 -!- Irssi: Looking up p4fsi4ockecnea7l.onion
01:23 -!- Irssi: Connecting to p4fsi4ockecnea7l.onion [127.0.69.0] port 7000
01:23 -!- Irssi: warning SSL handshake failed: Connection refused
01:23 -!- Irssi: Connection lost to p4fsi4ockecnea7l.onion
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] can't enable SSL with IRSSI over TOR

2012-05-06 Thread tor
On 06/05/12 08:19, Shane wrote:

 Does Freenode's hidden service support SSL?  Does it support SSL on port 
 6697?

 
 Yes it does. 6697, 7000, 7070 that I know of ... These are my latest tries.

There's no point in adding a layer of SSL over hidden services; the
connection is already encrypted end to end.

-- 
Mike Cardwell  https://grepular.com/ http://cardwellit.com/
OpenPGP Key35BC AF1D 3AA2 1F84 3DC3  B0CF 70A5 F512 0018 461F
XMPP OTR Key   8924 B06A 7917 AAF3 DBB1  BF1B 295C 3C78 3EF1 46B4



signature.asc
Description: OpenPGP digital signature
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] can't enable SSL with IRSSI over TOR

2012-05-06 Thread Shane
 There's no point in adding a layer of SSL over hidden services; the
 connection is already encrypted end to end.


I thought it was more like proxy-to-proxy leaving a small in-the-clear
gaps on the ends.
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] can't enable SSL with IRSSI over TOR

2012-05-06 Thread tor
On 06/05/12 18:02, Shane wrote:

 There's no point in adding a layer of SSL over hidden services; the
 connection is already encrypted end to end.
 
 I thought it was more like proxy-to-proxy leaving a small in-the-clear
 gaps on the ends.

I guess so. There's a chance that the Tor daemon is running on a
different machine to the IRC server and somewhere between those two
machines the network is compromised.

-- 
Mike Cardwell  https://grepular.com/ http://cardwellit.com/
OpenPGP Key35BC AF1D 3AA2 1F84 3DC3  B0CF 70A5 F512 0018 461F
XMPP OTR Key   8924 B06A 7917 AAF3 DBB1  BF1B 295C 3C78 3EF1 46B4



signature.asc
Description: OpenPGP digital signature
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk