You can generate a certificate with the following command:
- openssl req -x509 -new -newkey rsa:4096 -sha256 -days 1000 -out freenode.pem -keyout freenode.pem
+ openssl req -x509 -new -newkey rsa:4096 -sha256 -days 1000 -nodes -out freenode.pem -keyout freenode.pem
You will be prompted for various pieces of information about the certificate.
The contents do not matter for our purposes, but `openssl` needs at least one of
Refer to znc's [official documentation](http://wiki.znc.in/Cert).
+HexChat
+-------
+
+The pem file should be placed in `certs/network name.pem` in the HexChat config directory (`~/.config/hexchat/` or `%appdata%\HexChat`), where `network name` is the name of the network as it appears in the network list (Ctrl-S). Note that the `certs` directory does not exist by default and you will have to create it yourself. Once the file is there, all subsequent SSL connections to that network will be using the certificate.
+
Add your fingerprint to NickServ
================================