[Erc-discuss] Re: SSL TLS certificates

[Joseph LP]

intrigeri <intrigeri <at> boum.org> writes:

 
Joseph LP wrote (03 May 2009 07:35:03 GMT) :
> Additionally, gnutls-cli (via tls-program) is unable to take 
certificates as an
> argument, whereas the older openssl s_client method can.

> Please advise on how to pass gnutls-cli as tls-program for certificate use.
> I've tried:
>  "gnutls-cli --priority secure256 --x509cafile
> /home/ootput/.private/cert/CAs.pem --x509certfile
> /home/ootput/.private/certs/nick.pem -p %p %h"
> 
> Which works for most other irc clients.. but not ERC
> 
> My tls-program, used by erc-tls, is set to :
> 
>   gnutls-cli --priority SECURE256 --kx DHE-DSS DHE-RSA
>     -p %p
>     --x509cafile /home/intrigeri/certs.pem %h
> 
> Works fine in Emacs 23.0.91.1 (Romain Françoise's Debian package).
> 
> Bye,

Hello,

Could you please test out that same method on OFTC server. You should receive a
fingerprint upon connection (indicating successful cert usage.) I could not
duplicate your success.

Regards,
Joe