summaryrefslogtreecommitdiff
path: root/src/core/session.c
AgeCommit message (Collapse)Author
2016-10-22Add x509 certificate and public key pinning support.Alexander Færøy
This patch adds two new options to /CONNECT and /SERVER to let the user pin either an x509 certificate and/or the public key of a given server. It is possible to fetch the certificate outside of Irssi itself to verify the checksum. To fetch the certificate call: $ openssl s_client -connect chat.freenode.net:6697 < /dev/null 2>/dev/null | \ openssl x509 > freenode.cert This will download chat.freenode.net:6697's TLS certificate and put it into the file freenode.cert. -tls_pinned_cert ---------------- This option allows you to specify the SHA-256 hash of the x509 certificate. When succesfully connected to the server, irssi will verify that the given server certificate matches the pin set by the user. The SHA-256 hash of a given certificate can be verified outside of irssi using the OpenSSL command line tool: $ openssl x509 -in freenode.cert -fingerprint -sha256 -noout -tls_pinned_pubkey ------------------ This option allows you to specify the SHA-256 hash of the subject public key information section of the server certificate. This section contains both the cryptographic parameters for the public key, but also information about the algorithm used together with the public key parameters. When succesfully connected to the server, irssi will verify that the given public key matches the pin set by the user. The SHA-256 hash of a public key can be verified outside of irssi using the OpenSSL command line tool: $ openssl x509 -in freenode.cert -pubkey -noout | \ openssl pkey -pubin -outform der | \ openssl dgst -sha256 -c | \ tr a-z A-Z It is possible to specify both -tls_pinned_cert and -tls_pinned_pubkey together.
2016-10-22Rename SSL to TLS.Alexander Færøy
This patch changes the internal name of SSL to TLS. We also add -tls_* options to /CONNECT and /SERVER, but make sure that the -ssl_* versions of the commands continue to work like before.
2015-04-17Merge pull request #199 from ailin-nemui/config-parserAlexander Færøy
Make config parser more robust
2015-04-14ssl: Add option to specify SSL cipher suite preference.Haw Loeung
2015-02-17add CONFIG_REC to config_node_section* APIsAilin Nemui
this adds the CONFIG_REC * to the config_node_section and config_node_section_index APIs as they will require access to the config cache later on to make the config parser more robust.
2010-04-03glib iochannel fixes from exg.Alexander Færøy
git-svn-id: file:///var/www/svn.irssi.org/SVN/irssi/trunk@5137 dbcabf3a-b0e7-0310-adc4-f8d773084564
2009-02-08Code Cleanup:Alexander Færøy
Use g_string_append_printf() instead of g_string_sprintfa() (which is considered deprecated.) git-svn-id: file:///var/www/svn.irssi.org/SVN/irssi/trunk@5003 dbcabf3a-b0e7-0310-adc4-f8d773084564
2008-11-28Allow storing multiple "other" prefixes such as +q and +a.Jilles Tjoelker
Original patch by JasonX, somewhat changed by exg and me. git-svn-id: file:///var/www/svn.irssi.org/SVN/irssi/trunk@4922 dbcabf3a-b0e7-0310-adc4-f8d773084564
2008-02-04Remove trailing whitespace.Emanuele Giaquinta
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4705 dbcabf3a-b0e7-0310-adc4-f8d773084564
2008-02-03Remove popt and use glib GOption commandline option parserEmanuele Giaquinta
(glib-2.6 is now the minimum required version). git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4700 dbcabf3a-b0e7-0310-adc4-f8d773084564
2007-05-26Hide --session from --help output and remove its mention from the manual,Emanuele Giaquinta
internal use only. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4525 dbcabf3a-b0e7-0310-adc4-f8d773084564
2007-05-24Cleanup option handling.Emanuele Giaquinta
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4510 dbcabf3a-b0e7-0310-adc4-f8d773084564
2007-05-20Farewell glib-1.Emanuele Giaquinta
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4509 dbcabf3a-b0e7-0310-adc4-f8d773084564
2007-05-08Oops. Update address correctly now.Wouter Coekaerts
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4490 dbcabf3a-b0e7-0310-adc4-f8d773084564
2007-05-08Update FSF addressWouter Coekaerts
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4489 dbcabf3a-b0e7-0310-adc4-f8d773084564
2006-09-22Revert second hunk of the previous patch, we want to check existence andEmanuele Giaquinta
execute permission for irssi_binary when upgrading. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4379 dbcabf3a-b0e7-0310-adc4-f8d773084564
2006-09-22Compute absolute path name of argv[0] at startup to make Irssi::get_irssi_binaryEmanuele Giaquinta
useful again. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4377 dbcabf3a-b0e7-0310-adc4-f8d773084564
2006-09-18Apply 05upgrade-check-binary.dpatch with some modifications.Emanuele Giaquinta
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4366 dbcabf3a-b0e7-0310-adc4-f8d773084564
2006-09-18Add missing free.Emanuele Giaquinta
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4365 dbcabf3a-b0e7-0310-adc4-f8d773084564
2006-09-17Remove useless check.Emanuele Giaquinta
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4354 dbcabf3a-b0e7-0310-adc4-f8d773084564
2004-10-18/UPGRADE saves now server->versionValentin Batz
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@3324 dbcabf3a-b0e7-0310-adc4-f8d773084564
2004-01-20isupport patch by David LeadbeaterTimo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@3211 dbcabf3a-b0e7-0310-adc4-f8d773084564
2003-11-16Support for sending SSL certificate to server and optionally verify server'sTimo Sirainen
certificate. See the -ssl_* options for /SERVER and /SERVER ADD. Patch by Joel Eriksson <je-irssi@bitnux.com>. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@3146 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-12-04Broke irssi_binary path.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@3041 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-12-03Made irssi_binary global and exported to perl as get_irssi_binary().Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@3039 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-08-26Added OpenSSL support by vjt@users.sf.net. Also fixes a possible crash afterTimo Sirainen
using /SERVER ADD -ircnet. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2890 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-05-20/UPGRADE was broken, changed again the server connection code.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2821 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-05-19net_connect*() contains now error parameter, so it can be used to properlyTimo Sirainen
check the errno if connect() fails. Added support for connecting to named UNIX sockets. Some cleanups with session handling / server connecting as well. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2819 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-05-16Better !channel support - window items now have "visual_name" and channelsTimo Sirainen
and queries also have "name". Normally they're identical but with !channels the visible_name contains the short !channel name, while name contains full !ABCDEchannel name. The visible_name should be used whenever displaying the channel name, or as printtext()'s target. So, this breaks a few scripts in !channels, they need to be modified to use $channel->{visible_name} instead. Also /LAYOUT SAVE should finally work properly with !channels. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2797 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-04-10Fixed one error and several warnings with GLIB 2.0Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2663 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-02-20/UPGRADE saves now topic_time and topic_by.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2523 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-02-02Comments are now allowed everywhere in config files.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2374 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-12-06/UPGRADE broke reconnections to server.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2204 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-12-01/UPGRADE shouldn't begin server reconnections in old client.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2176 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-25/UPGRADE: when trying to restore connection to server of which chatTimo Sirainen
protocol is unknown, close the specified handle. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2148 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-25/UPGRADE: Irssi no longer asks for /NAMES list from server whenTimo Sirainen
rejoining channels, but the nick list is transferred in session file. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2144 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-20--session broke --help outputTimo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2130 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-20/UPGRADE: waited pids are now transferred to new client so we don't leaveTimo Sirainen
zombie processes. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2129 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-20/UPGRADE: --home and --config parameters weren't passed to new irssi.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2122 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-20Typobugfix.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2120 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-20/UPGRADE now saves the session, disconnects the servers so that the socketTimo Sirainen
isn't closed but irssi thinks its disconnected, then it quits irssi, and as the last command executes the new irssi. This way we get clean deinitialization so irssi can close log files, destroy scripts, etc. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2114 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-20/UPGRADE: server command queue is now flushed to make sure everythingTimo Sirainen
gets sent to server. Channels are now stored in in config blocks instead of just in one string, this way we can restore the topic and key. Away status in server is also restored. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2113 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-19Irssi printed GLib error if no PATH was set..Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2081 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-19/UPGRADE didn't work properly when you were connected to multiple servers.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2080 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-19session_set_binary() - we can't get the full path to irssi binary fromTimo Sirainen
argv[0] and we need it, so its searched now. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2079 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-19Added syntax comment for /UPGRADETimo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2072 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-19A few more updates.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2071 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-11-19/UPGRADE - upgrade-on-the-fly feature. Currently only moves the activeTimo Sirainen
server connections to the new irssi process, but that should be enough to never quit from IRC again :) git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2070 dbcabf3a-b0e7-0310-adc4-f8d773084564