HOW-TO rTorrent + SSL

[HeXiLeD]

For Gentoo Linux and similar distributions

Script:


Create the script:

Code: Select all

# nano script.sh

Code: Select all

#!/bin/sh
TRACKER=www.your-tracker.com

openssl s_client -connect $TRACKER:443 </dev/null 2>/dev/null | sed -n '/BEGIN CERTIFICATE/,/END CERTIFICATE/p' >>
/etc/ssl/certs/$TRACKER.crt
openssl x509 -in /etc/ssl/certs/$TRACKER.crt -out /etc/ssl/certs/$TRACKER.der -outform DER
openssl x509 -in /etc/ssl/certs/$TRACKER.der -inform DER -out /etc/ssl/certs/$TRACKER.pem -outform PEM
c_rehash
unset TRACKER

Make it executable:

Code: Select all

# chmod +x script.sh

Run the script :

Code: Select all

# ./script.sh

To check cert:

Code: Select all

$ curl -I --capath /etc/ssl/certs www.your-tracker.com

And you will similar output:

Code: Select all

HTTP/1.1 302 Found
Date: Mon, 18 Aug 2008 05:45:45 GMT
Server: Apache
Location: /
Connection: close
Content-Type: text/html; charset=iso-8859-1

You can run it like this:

Code: Select all

$ rtorrent -o http_capath=/etc/ssl/certs/www.your-tracker.com.pem

You can also add http_capath=/etc/ssl/certs/www.your-tracker.com.pem to your .rtorrent.rc conf

Add to rtorrent.rc the following:

Code: Select all

encryption = require,allow_incoming,try_outgoing,enable_retry,prefer_plaintext

The latest (if existent) will always be here @ Full rTorrent client Configuration

[vokiel]

For the record using http_capath=/etc/ssl/certs/www.your-tracker.com.pem doesn't seem to yield the desired result with 0.8.6-r1. The cert isn't found and you get a connection error. I think the proper option is http_cacert=/etc/ssl/certs/www.your-tracker.com.pem