This short HOWTO will explain how to setup Blitzed Open Proxy Monitor to connect to an IRC Server via SSL. I expect that you have basic knowledge of Linux/Unix, and already know how to configure/compile, and setup the BOPM as normal.
tools you will need:
• stunnel
• Blitzed Open Proxy Monitor
• An SSL-Capable ircd such as ircd-ratbox
I will assume you already have your SSL-Capable IRCD up and running correctly. I will also assume you have your BOPM up and running correctly. All we are going to do is SSLify it.
Stunnel Setup
• Create a certificate for yourself. You can do this with the following command:
openssl req -new -newkey rsa:1024 -days 365 \
-nodes -x509 -keyout `uname -n`.pem \
-out `uname -n`.pem
• Move or copy the created file, which will be named YOUR_MACHINE_NAME.pem to ~/.YOUR_MACHINE_NAME.pem.
(obviously, YOUR_MACHINE_NAME will be the actual name of your server, such as "leetbox" or something).
• Copy the following text into ~/.stunnel.conf and edit the ip addresses and ports to suit your needs.
cert = /home/YOUR_USERNAME/.YOUR_MACHINE_NAME.pem
[bopm]
; adjust the port number if necessary
accept = 127.0.0.1:8500
; local is the "vhost" stunnel will use to connect to your irc server.
; If you don't use a vhost, leave it commented out.
;local = 0.0.0.0
; connect is the irc server's ip address and port that we are connecting to
connect = 0.0.0.0:6697
client = yes
• Save and close ~/.stunnel.conf. then run:
stunnel ~/.stunnel.conf
• You can test that stunnel is working correctly by connecting to it with telnet.
telnet 127.0.0.1 8500
• If you see the server connect notices, you are in business, otherwise you made a mistake somewhere.
BOPM Setup
• Edit bopm.conf and adjust it's settings as follows:
server = 127.0.0.1
port = 8500
• Save and restart your bopm.
• Your BOPM should now be connected to IRC via SSL.
