adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-10-31 01:32:02 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity

webadmin client cert auth #475

New Issue
Closed
opened 2026-10-05 04:23:45 +02:00 by adam · 5 comments
adam commented 2026-10-05 04:23:45 +02:00
Owner
Copy link
Copy source

The webadmin already asks for a client certificate when you connect using SSL, so I thought it would be cool if you could use the same certificate as with IRC cert auth as a SSL client certificate in the webadmin panel, or alternatively changing it so it doesn't ask for one if not possible.

The webadmin already asks for a client certificate when you connect using SSL, so I thought it would be cool if you could use the same certificate as with IRC cert auth as a SSL client certificate in the webadmin panel, or alternatively changing it so it doesn't ask for one if not possible. <!-- github-sync-id:57388159 -->
adam closed this issue 2026-10-05 04:23:45 +02:00
adam commented 2026-10-05 04:23:46 +02:00
Author
Owner
Copy link
Copy source

You can.

You can. <!-- github-comment-id:73979785 -->
adam commented 2026-10-05 04:23:47 +02:00
Author
Owner
Copy link
Copy source

How?

How? <!-- github-comment-id:73982979 -->
adam commented 2026-10-05 04:23:48 +02:00
Author
Owner
Copy link
Copy source

Ah well crap, seems I failed when testing it. Sorry for the noise.

Ah well crap, seems I failed when testing it. Sorry for the noise. <!-- github-comment-id:73983105 -->
adam commented 2026-10-05 04:23:48 +02:00
Author
Owner
Copy link
Copy source

For posterity:

openssl pkcs12 -export -in user.pem -out user.p12

Then, in Chrome, go to Settings, Show Advanced Settings, HTTPS/SSL, Manager Certificates. Import the newly-created PKCS#12 file.

When you visit your ZNC web interface it should prompt you to choose the certificate for identification. Then, you can enter your username with a blank password and log in (as you would specify a blank password for IRC authentication).

If someone else wents to pipe up regarding FireFox instructions, please do.

For posterity: ``` openssl pkcs12 -export -in user.pem -out user.p12 ``` Then, in Chrome, go to Settings, Show Advanced Settings, HTTPS/SSL, Manager Certificates. Import the newly-created PKCS#12 file. When you visit your ZNC web interface it should prompt you to choose the certificate for identification. Then, you can enter your username with a blank password and log in (as you would specify a blank password for IRC authentication). If someone else wents to pipe up regarding FireFox instructions, please do. <!-- github-comment-id:75166997 -->
adam commented 2026-10-05 04:23:49 +02:00
Author
Owner
Copy link
Copy source

What I usually do is:

openssl req -nodes -newkey rsa:4096 -keyout Mikaela.pem -x509 -days 3650 -out Mikaela.pem -subj "/CN=Mikaela"

and if I recall correctly both Chrome and Firefox accept the pem file directly.

What I usually do is: ``` openssl req -nodes -newkey rsa:4096 -keyout Mikaela.pem -x509 -days 3650 -out Mikaela.pem -subj "/CN=Mikaela" ``` and if I recall correctly both Chrome and Firefox accept the pem file directly. <!-- github-comment-id:75186445 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#475