summaryrefslogtreecommitdiff
path: root/src/core/servers-setup.c
AgeCommit message (Collapse)Author
2016-10-22Add x509 certificate and public key pinning support.Alexander Færøy
This patch adds two new options to /CONNECT and /SERVER to let the user pin either an x509 certificate and/or the public key of a given server. It is possible to fetch the certificate outside of Irssi itself to verify the checksum. To fetch the certificate call: $ openssl s_client -connect chat.freenode.net:6697 < /dev/null 2>/dev/null | \ openssl x509 > freenode.cert This will download chat.freenode.net:6697's TLS certificate and put it into the file freenode.cert. -tls_pinned_cert ---------------- This option allows you to specify the SHA-256 hash of the x509 certificate. When succesfully connected to the server, irssi will verify that the given server certificate matches the pin set by the user. The SHA-256 hash of a given certificate can be verified outside of irssi using the OpenSSL command line tool: $ openssl x509 -in freenode.cert -fingerprint -sha256 -noout -tls_pinned_pubkey ------------------ This option allows you to specify the SHA-256 hash of the subject public key information section of the server certificate. This section contains both the cryptographic parameters for the public key, but also information about the algorithm used together with the public key parameters. When succesfully connected to the server, irssi will verify that the given public key matches the pin set by the user. The SHA-256 hash of a public key can be verified outside of irssi using the OpenSSL command line tool: $ openssl x509 -in freenode.cert -pubkey -noout | \ openssl pkey -pubin -outform der | \ openssl dgst -sha256 -c | \ tr a-z A-Z It is possible to specify both -tls_pinned_cert and -tls_pinned_pubkey together.
2016-10-22Rename SSL to TLS.Alexander Færøy
This patch changes the internal name of SSL to TLS. We also add -tls_* options to /CONNECT and /SERVER, but make sure that the -ssl_* versions of the commands continue to work like before.
2016-03-22Simplify some logic in server_create_connLemonBoy
2016-03-19Throw an error when a chatnet has no available urlLemonBoy
If you type /connect <CN> and the chatnet <CN> has no url available let's just throw an error instead of trying to process <CN> as a url.
2015-12-09Minor adjustments.LemonBoy
Use g_strcmp0 instead of strcmp. Explicit checks added for the g_strcmp0 clauses.
2015-12-09Rewrite some faulty logic handling the saved servers.LemonBoy
2015-10-01Fix return value of server_setup_remove_chatnetisundil
2015-10-01Updated server removalisundil
Removing network will also remove attached channels
2015-10-01Fix #45 Make it easy to delete default channels, servers and networksisundil
Removing network will now also remove all attached servers
2015-09-22Revert "Network and IPv{4,6} related changes"ailin-nemui
2015-09-21Initial work to make irssi respect the resolved ip orderLemonBoy
Ip's aren't selected using random() anymore, also select the ip version by using getaddrinfo and some proper hints.
2015-04-17Merge pull request #199 from ailin-nemui/config-parserAlexander Færøy
Make config parser more robust
2015-04-17Merge pull request #235 from dequis/g_strcmp0Alexander Færøy
Change all strcmp() to g_strcmp0() to handle nulls gracefully
2015-04-14ssl: Add option to specify SSL cipher suite preference.Haw Loeung
2015-04-07Change all strcmp() to g_strcmp0() to handle nulls gracefullydequis
Just a string replacement (but i did check every one of them) sed -i 's/strcmp(/g_strcmp0(/g' **/*.c
2015-02-17add CONFIG_REC to config_node_section* APIsAilin Nemui
this adds the CONFIG_REC * to the config_node_section and config_node_section_index APIs as they will require access to the config cache later on to make the config parser more robust.
2014-11-20Correctly parse unix sockets servers in the configGuillaume BROGI
2014-06-10Replace deprecated g_str[n]casecmp with g_ascii_str[n]cmp.David Hill
2014-01-11Add -ssl_pass to /connect and /serverAlexander Færøy
Fixes: Bug #305 git-svn-id: file:///var/www/svn.irssi.org/SVN/irssi/trunk@5231 dbcabf3a-b0e7-0310-adc4-f8d773084564
2010-03-21Allow servers with the same server and port to be part of multiple networks. ↵Alexander Færøy
This should make life much easier for znc users. Thanks to Tykling, Bazerka and znx. git-svn-id: file:///var/www/svn.irssi.org/SVN/irssi/trunk@5125 dbcabf3a-b0e7-0310-adc4-f8d773084564
2008-04-28Make some variables static.Emanuele Giaquinta
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4814 dbcabf3a-b0e7-0310-adc4-f8d773084564
2008-03-15Remove unused global use_ssl and ssl_* settings.Emanuele Giaquinta
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4776 dbcabf3a-b0e7-0310-adc4-f8d773084564
2008-03-09Use g_ascii_str{,n}casecmp for case insensitive comparison withEmanuele Giaquinta
ascii only strings. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4738 dbcabf3a-b0e7-0310-adc4-f8d773084564
2007-05-08Oops. Update address correctly now.Wouter Coekaerts
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4490 dbcabf3a-b0e7-0310-adc4-f8d773084564
2007-05-08Update FSF addressWouter Coekaerts
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4489 dbcabf3a-b0e7-0310-adc4-f8d773084564
2003-11-16Support for sending SSL certificate to server and optionally verify server'sTimo Sirainen
certificate. See the -ssl_* options for /SERVER and /SERVER ADD. Patch by Joel Eriksson <je-irssi@bitnux.com>. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@3146 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-08-26/SERVER -ssl option was lost while reconnecting if server existed in /SERVERTimo Sirainen
LIST without SSL. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2894 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-08-26Added OpenSSL support by vjt@users.sf.net. Also fixes a possible crash afterTimo Sirainen
using /SERVER ADD -ircnet. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2890 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-05-11server_setup_add() now emits signal "server setup updated"Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2771 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-02-15renamed old config_node_index() to config_node_nth(). added newTimo Sirainen
config_node_index() function. added config_node_section_index() for adding/moving node to specified position in list. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2460 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-02-10Removed some old backwards compatibility code.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2411 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-02-02Comments are now allowed everywhere in config files.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2374 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-01-25/SERVER ADD -noproxy wasn't saved to configTimo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2345 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-01-24/SERVER ADD: added -noproxy option and -proxy which just removes theTimo Sirainen
-noproxy. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2344 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-01-22Added /SET proxy_string_after setting which gets sent after NICK/USER, bncTimo Sirainen
wants this. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2338 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-12-06/IRCNET ADD -usermode option added.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2206 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-10-21Added reference counter to SERVER_CONNECT_REC. Since it's being moved aroundTimo Sirainen
a lot in reconnects etc. this should make it easier to track when it's supposed to be destroyed. Hopefully fixes a crash I assume is related to this but couldn't find.. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1880 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-10-20fix a fixTimo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1869 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-10-20When assiging chatnet to server connect record, always try to get the nameTimo Sirainen
from chatnets list so the case will be correct. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1868 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-06-27Using different ports in one server for different chat networks didn't workTimo Sirainen
properly. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1580 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-03-20added /SET proxy_passwordTimo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1414 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-03-08/CONNECT -ircnet didn't load ircnet specific settings correctlyTimo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1363 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-03-04save_ips() wasn't working properly..Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1338 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-03-04IPv6 fixes. Everything now keeps both v4 and v6 addresses in memory andTimo Sirainen
at connect() time it's decided which one should be used. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1334 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-02-20/SET resolve_prefer_ipv6 - should we prefer IPv6 or IPv4 addresses inTimo Sirainen
host name resolving. /SERVER ADD: added options -4 and -6. Fixed crash at startup if server didn't have chat network set. "Connecting to xxx [ip]" is now displayed before calling connect(), so if it fails we'll still get the IP it's trying to connect to. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1268 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-02-19Connection updates: moved /SERVER and /CONNECT to core from irc.Timo Sirainen
Several other related multiprotocol updates. Removed /SILCSERVER from SILC, /CONNECT and /SERVER should work properly now. Rejoining channels after reconnection works. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1245 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-02-17Config file: ircnets -> chatnets, added type = "chat protocol" toTimo Sirainen
chatnet config. Moved reading chatnets to core. Lots of other multiprotocol updates. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1237 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-02-09/CONNECT, /SERVER: added -4 and -6 options for specifying if we shouldTimo Sirainen
connect to IPv4 or IPv6 address of the server. If -host or /SET hostname is set irssi determines from it if it should use IPv4 or v6. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1192 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-01-28backwards compatibility fix: when changing ircnet -> chatnet, theTimo Sirainen
chatnet name in memory was corrupted git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1159 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-12-19put back ircnet -> chatnet backwards compatibility, this time modifyTimo Sirainen
the config file to use chatnet so after .98 we could remove this git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1016 dbcabf3a-b0e7-0310-adc4-f8d773084564
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-28 16:27:54 +0000