Steps to use CertFP on Irssi & Libera Chat

NOTE: This document requires that

1. you already have an account with NickServ on Libera Chat, see https://libera.chat/guides/registration
2. and that you have added the Libera Chat network to Irssi, see Libera Chat

On your shell:

( Command taken from https://libera.chat/guides/certfp )

openssl req -x509 -new -newkey rsa:4096 -sha256 -days 1096 -nodes -out libera.pem -keyout libera.pem

Then copy it somewhere, e.g. your Irssi folder:

cp -i libera.pem ~/.irssi

In Irssi:

First, you have to log in with Username & Password, register them in Irssi:

/network modify -sasl_mechanism PLAIN -sasl_username YOURUSERNAME -sasl_password YOURPASSWORD LiberaChat

Next, you have to register the TLS Certificate Key you created above to the Libera Chat server:

/server modify -tls_verify -tls_cert ~/.irssi/libera.pem irc.libera.chat 6697

Now, connect to Libera Chat ( with User & Pass )

/connect LiberaChat

After you are connected, register your Certificate Key with NickServ:

/msg NickServ CERT ADD

It will respond to you, if you did everything right:

-NickServ([email protected])- Added fingerprint XXXXXX to your fingerprint list.

Change the login from Password to Certificate Key:

Disconnect:

/disconnect

Clear the password and change to SASL EXTERNAL:

/network modify -sasl_password '' -sasl_mechanism EXTERNAL LiberaChat

Test it:

/connect LiberaChat

You can verify if you are logged in with Certificate Key by doing:

/whois YOURNICK

It will output:

-!-           : has client certificate fingerprint xxxxxxx

Make sure to

/save