Following information is meant for a Debian system.
Requirements
To be able to do this we will need the following:
- irssi installed
- tor package installed
- registered nickname on libera
- SASL auth for that nickname
Install packages
sudo apt install tor irssi -y
Tor config
- Add this line to the bottom of /etc/tor/torrc
MapAddress palladium.libera.chat libera75jm6of4wxpxt4aynol3xjmbtxgfyjpu34ss4d7r7q2v5zrpyd.onion
Do make sure that
palladium.libera.chat
is not actually in use on your network, otherwise pick something else. - Restart the service
sudo systemctl restart tor
or
sudo service tor restart
Either one should work.
Certificate for SASL auth
- Generate cert & key pair
You may have to start irssi once first for the .irssi directory to be created.mkdir ~/.irssi/certs cd ~/.irssi/certs openssl req -newkey rsa:4096 -x509 -keyout <nickname>.key -out <nickname>.crt -nodes -subj "/CN=<nickname>"
- Bundle the key and certificate
cat <nickname>.key <nickname>.crt > <nickname>.pem
- Get the fingerprint (we’ll need this in the next section)
openssl x509 -in <nickname>.pem -outform der | sha512sum -b | cut -d ' ' -f1
IRSSI
- Start irssi
irssi -n <nickname>
- Connect to Libera
/connect -tls irc.libera.chat -p 6697
- Msg Nickserv and register your nickname
You wil also have to pick a password and give up an emailaddress to register/msg NickServ REGISTER <password> <emailaddress>
- Add the certificate fingerprint to your nickname (from the previous section, step 3)
/msg NickServ CERT ADD <fingerprint>
- Verify your account
You should have received an email with a confirmation code/msg NickServ VERIFY REGISTER <nickname> <confirmation_code>
- Add a network that we’ll use to connect via Tor
The username and password should be the same as what you used in step 3./network add -sasl_username <nickname> -sasl_password <password> -sasl_mechanism EXTERNAL LiberaTor
- Add a server entry
/server add -net LiberaTor -ssl -ssl_cert ~/.irssi/certs/<nickname>.pem 10.40.40.40 6697
You can also add
-auto
to this if you want to connect automatically when you start irssi. - Finally, save the config and quit
/save /quit
Run IRSSI via Tor and connect
- Start irssi
torify irssi -n <nickname>
- Connect (if required)
/connect LiberaTor
I found this useful because otherwise your IP is visible and maybe you don’t want that.
Good luck!