Use default root CAs for SSL connections

irc/connection.go

@@ -5,6 +5,7 @@ import (
 	"os"
 	"net"
 	"crypto/tls"
+	"crypto/rand"
 	"fmt"
 	"strings"
 	"time"
@@ -100,16 +101,13 @@ func (conn *Conn) Connect(host string, ssl bool, pass string) os.Error {
 		}
 	}
 
-	var sock net.Conn;
+	sock, err := net.Dial("tcp", "", host)
-	var err os.Error;
-	if ssl {
-		sock, err = tls.Dial("tcp", "", host)
-	} else {
-		sock, err = net.Dial("tcp", "", host)
-	}
 	if err != nil {
 		return err
 	}
+	if ssl {
+		sock = tls.Client(sock, &tls.Config{Rand: rand.Reader, Time: time.Nanoseconds})
+	}
 
 	conn.Host = host
 	conn.SSL = ssl
@@ -121,7 +119,6 @@ func (conn *Conn) Connect(host string, ssl bool, pass string) os.Error {
 	go conn.send()
 	go conn.recv()
 
-	// see getStringMsg() in commands.go for what this does
 	if pass != "" {
 		conn.Pass(pass)
 	}

rbot.conf.example

@@ -2,7 +2,7 @@
 server: irc.rizon.net
 nick: rbot
 user: rbot
-ssl: false
+ssl: true
 trigger: !
 
 [#raylu]