Age | Commit message (Collapse) | Author |
|
|
|
This patch adds two new options to /CONNECT and /SERVER to let the user
pin either an x509 certificate and/or the public key of a given server.
It is possible to fetch the certificate outside of Irssi itself to
verify the checksum. To fetch the certificate call:
$ openssl s_client -connect chat.freenode.net:6697 < /dev/null 2>/dev/null | \
openssl x509 > freenode.cert
This will download chat.freenode.net:6697's TLS certificate and put it into the
file freenode.cert.
-tls_pinned_cert
----------------
This option allows you to specify the SHA-256 hash of the x509
certificate. When succesfully connected to the server, irssi will verify
that the given server certificate matches the pin set by the user.
The SHA-256 hash of a given certificate can be verified outside of irssi
using the OpenSSL command line tool:
$ openssl x509 -in freenode.cert -fingerprint -sha256 -noout
-tls_pinned_pubkey
------------------
This option allows you to specify the SHA-256 hash of the subject public key
information section of the server certificate. This section contains both the
cryptographic parameters for the public key, but also information about the
algorithm used together with the public key parameters.
When succesfully connected to the server, irssi will verify that the
given public key matches the pin set by the user.
The SHA-256 hash of a public key can be verified outside of irssi using
the OpenSSL command line tool:
$ openssl x509 -in freenode.cert -pubkey -noout | \
openssl pkey -pubin -outform der | \
openssl dgst -sha256 -c | \
tr a-z A-Z
It is possible to specify both -tls_pinned_cert and -tls_pinned_pubkey
together.
|
|
This patch changes the internal name of SSL to TLS. We also add -tls_*
options to /CONNECT and /SERVER, but make sure that the -ssl_* versions
of the commands continue to work like before.
|
|
|
|
|
|
Add modify to /channel, /server and /network
|
|
|
|
Add an option to make /hilight case sensitive
|
|
|
|
|
|
Allow use of /hilight -case exAMPle (compatible with other options)
Added matchcase to hilight config file (exemple: { text = exAMPle; matchcase = yes; } )
|
|
Support quoted filenames in some /DCC commands
|
|
This reverts commit 4beebe3238dda96efd4c3a0a6f6002ad5afc96e7.
|
|
|
|
|
|
|
|
Allow the user to set and modify the SASL parameters
|
|
The /NETWORK ADD command now is able to modify the SASL mechanism, the
username and the password on a chatnet basis.
|
|
Properly describe the window command.
Make help sort order deterministic.
|
|
|
|
|
|
|
|
Conflicts:
src/irc/proxy/listen.c
|
|
Clarify the help for /LIST (#228)
|
|
Only the filename can come right after `-file`. Having `-force` in that position causes an `Irssi: Could not open lastlog: No such file or directory` error.
|
|
|
|
|
|
|
|
|
|
|
|
Correct some confusing inaccuracies and document a parameters that got lost on the rewrite.
|
|
|
|
Documentation fix for #185
|
|
typo fixes - https://github.com/vlajos/misspell_fixer
|
|
Copied text from 68f8229 (SVN r5231)
|
|
|
|
Duplicated line inserted in commit 66f5fb6. Reported by @sharethebug on IRC.
|
|
|
|
|
|
Updated ALIAS help.
|
|
Applied grammar and styling corrections.
|
|
Rewrote the syntax documentation of U-Z commands.
|
|
Fixed a typo in the cmdmax argument.
|
|
Updated the documentation for LIST.
|
|
Rewrote the syntax documentation for all commands starting with S.
|
|
Removed the obsolete SQUERY and SERVLIST commands.
|
|
|
|
Rewrote the syntax documentation for all commands starting with the
letter R.
|
|
The RPING command is obsolete.
|
|
Fixed an example of QUOTE
|