summaryrefslogtreecommitdiff
path: root/src/fe-common/core
AgeCommit message (Collapse)Author
2016-10-23Shorten the certificate chain output.Alexander Færøy
2016-10-22Only do checks for SSL_get_server_tmp_key in network-openssl.c.Alexander Færøy
2016-10-22Declare variables in the beginning of the function.Alexander Færøy
2016-10-22Add x509 certificate and public key pinning support.Alexander Færøy
This patch adds two new options to /CONNECT and /SERVER to let the user pin either an x509 certificate and/or the public key of a given server. It is possible to fetch the certificate outside of Irssi itself to verify the checksum. To fetch the certificate call: $ openssl s_client -connect chat.freenode.net:6697 < /dev/null 2>/dev/null | \ openssl x509 > freenode.cert This will download chat.freenode.net:6697's TLS certificate and put it into the file freenode.cert. -tls_pinned_cert ---------------- This option allows you to specify the SHA-256 hash of the x509 certificate. When succesfully connected to the server, irssi will verify that the given server certificate matches the pin set by the user. The SHA-256 hash of a given certificate can be verified outside of irssi using the OpenSSL command line tool: $ openssl x509 -in freenode.cert -fingerprint -sha256 -noout -tls_pinned_pubkey ------------------ This option allows you to specify the SHA-256 hash of the subject public key information section of the server certificate. This section contains both the cryptographic parameters for the public key, but also information about the algorithm used together with the public key parameters. When succesfully connected to the server, irssi will verify that the given public key matches the pin set by the user. The SHA-256 hash of a public key can be verified outside of irssi using the OpenSSL command line tool: $ openssl x509 -in freenode.cert -pubkey -noout | \ openssl pkey -pubin -outform der | \ openssl dgst -sha256 -c | \ tr a-z A-Z It is possible to specify both -tls_pinned_cert and -tls_pinned_pubkey together.
2016-10-22Display TLS connection information when connected to a TLS enabled server.Alexander Færøy
2016-10-22Rename SSL to TLS.Alexander Færøy
This patch changes the internal name of SSL to TLS. We also add -tls_* options to /CONNECT and /SERVER, but make sure that the -ssl_* versions of the commands continue to work like before.
2016-09-20Patches for heap corruption and missing bounds checkailin-nemui
By Gabriel Campana and Adrien Guinet from Quarkslab.
2016-09-13Merge pull request #516 from LemonBoy/comp-fileailin-nemui
Fix the tab completion for paths starting with ./
2016-08-22fix nick->host == NULL crashailin-nemui
2016-07-12Minor cosmetic fix in /unignore error message.LemonBoy
Reported here: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577202
2016-07-12Fix the tab completion for paths starting with ./LemonBoy
2016-06-24Merge pull request #496 from ailin-nemui/compailin-nemui
completion fixes
2016-06-21Merge pull request #498 from vague666/add_modify_functionsLemonBoy
Add modify to /channel, /server and /network
2016-06-21use TRUE/FALSE in if statements for gbooleanJari Matilainen
2016-06-19Fix minor nitsJari Matilainen
2016-06-18Add command_set_options for modify commands to allow completionJari Matilainen
2016-06-18Let ADD still work as modifyJari Matilainen
2016-06-18Add /server modifyJari Matilainen
2016-06-18Add /channel modifyJari Matilainen
2016-06-16completion fixesailin-nemui
2016-06-14Merge pull request #422 from LemonBoy/misc-cleanupailin-nemui
Clean up misc.c
2016-06-13Add a completion_match_case setting.LemonBoy
2016-06-13Be smart about case-matching the nicks.LemonBoy
If the prefix contains an uppercase letter then don't use the case-insensitive search functions.
2016-06-13Add a space after the comma when listing the options.LemonBoy
2016-06-13Move the validation of the CHOICE setting valueLemonBoy
Also, use a FORMAT to show the error message.
2016-06-12Strip the surrounding whitespace.LemonBoy
2016-06-12Sort the completion resultsLemonBoy
Make sure the current option is shown first.
2016-06-12Add a CHOICE type to the settings system.LemonBoy
This is useful to let the user choose an option between a finite set of valid alternatives.
2016-06-05Factor out some redundant code and remove hashtable_get_keysLemonBoy
2016-06-05Replace strarray_length with g_strv_lengthLemonBoy
2016-06-05Replace mkpath with g_mkdir_with_parentsLemonBoy
2016-05-18Merge pull request #480 from xavierog/handle-utf8-nicks-with-mk_wcwidthailin-nemui
Handle utf8 nicks with mk_wcwidth()
2016-05-13Improve UTF-8 handling in display_sorted_nicks().Xavier G
2016-05-13Fix indentation of display_sorted_nicks().Xavier G
This was done assuming an "indent with tab, align with spaces" approach. get_alignment also benefited from a minor indentation fix.
2016-05-13Leverage string_policy().Xavier G
2016-05-13Rename advance() into string_advance().Xavier G
2016-05-13Move advance() from fe-common/core to core.Xavier G
2016-05-13Move utf8.{h,c} from fe-common/core to core.Xavier G
2016-05-03Fix some ANSI C issues.pisculichi
2016-04-30Increased ABI versionisundil
2016-04-29Added case-sensitive regexp matching for hilightsisundil
2016-04-29changed command-line -case to -matchcaseB Thibault
2016-04-29Ref #421 (Add an option to make /hilight case sensitive)B Thibault
Allow use of /hilight -case exAMPle (compatible with other options) Added matchcase to hilight config file (exemple: { text = exAMPle; matchcase = yes; } )
2016-04-29retabB Thibault
2016-03-22Merge pull request #443 from LemonBoy/chatnetailin-nemui
Throw an error when a chatnet has no available url
2016-03-22Merge pull request #446 from ailin-nemui/fix_445ailin-nemui
strip less whitespace from commands
2016-03-20strip less whitespace from commandsailin-nemui
fixes #445
2016-03-19Throw an error when a chatnet has no available urlLemonBoy
If you type /connect <CN> and the chatnet <CN> has no url available let's just throw an error instead of trying to process <CN> as a url.
2016-03-17Don't use glob matching, just regular string comparisonsJari Matilainen
2016-03-14Use glob matching for activity_hide_targetsJari Matilainen
spaces vs tabs! strarray_find* needs to return -1 if no index found