summaryrefslogtreecommitdiff
path: root/src/fe-common/irc/fe-irc-server.c
AgeCommit message (Collapse)Author
2016-10-22Add x509 certificate and public key pinning support.Alexander Færøy
This patch adds two new options to /CONNECT and /SERVER to let the user pin either an x509 certificate and/or the public key of a given server. It is possible to fetch the certificate outside of Irssi itself to verify the checksum. To fetch the certificate call: $ openssl s_client -connect chat.freenode.net:6697 < /dev/null 2>/dev/null | \ openssl x509 > freenode.cert This will download chat.freenode.net:6697's TLS certificate and put it into the file freenode.cert. -tls_pinned_cert ---------------- This option allows you to specify the SHA-256 hash of the x509 certificate. When succesfully connected to the server, irssi will verify that the given server certificate matches the pin set by the user. The SHA-256 hash of a given certificate can be verified outside of irssi using the OpenSSL command line tool: $ openssl x509 -in freenode.cert -fingerprint -sha256 -noout -tls_pinned_pubkey ------------------ This option allows you to specify the SHA-256 hash of the subject public key information section of the server certificate. This section contains both the cryptographic parameters for the public key, but also information about the algorithm used together with the public key parameters. When succesfully connected to the server, irssi will verify that the given public key matches the pin set by the user. The SHA-256 hash of a public key can be verified outside of irssi using the OpenSSL command line tool: $ openssl x509 -in freenode.cert -pubkey -noout | \ openssl pkey -pubin -outform der | \ openssl dgst -sha256 -c | \ tr a-z A-Z It is possible to specify both -tls_pinned_cert and -tls_pinned_pubkey together.
2016-10-22Rename SSL to TLS.Alexander Færøy
This patch changes the internal name of SSL to TLS. We also add -tls_* options to /CONNECT and /SERVER, but make sure that the -ssl_* versions of the commands continue to work like before.
2016-06-19Fix minor nitsJari Matilainen
2016-06-18Add /server modify SYNTAXJari Matilainen
2015-04-14ssl: Add option to specify SSL cipher suite preference.Haw Loeung
2014-09-11source cleanup: remove trailing whitespacesMichael Vetter
2014-01-11Add -ssl_pass to /connect and /serverAlexander Færøy
Fixes: Bug #305 git-svn-id: file:///var/www/svn.irssi.org/SVN/irssi/trunk@5231 dbcabf3a-b0e7-0310-adc4-f8d773084564
2009-02-08Code Cleanup:Alexander Færøy
Use g_string_append_printf() instead of g_string_sprintfa() (which is considered deprecated.) git-svn-id: file:///var/www/svn.irssi.org/SVN/irssi/trunk@5003 dbcabf3a-b0e7-0310-adc4-f8d773084564
2007-05-08Oops. Update address correctly now.Wouter Coekaerts
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4490 dbcabf3a-b0e7-0310-adc4-f8d773084564
2007-05-08Update FSF addressWouter Coekaerts
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@4489 dbcabf3a-b0e7-0310-adc4-f8d773084564
2004-07-11s/ircnet/network/ - patch by Joost VunderinkTimo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@3270 dbcabf3a-b0e7-0310-adc4-f8d773084564
2003-11-16Support for sending SSL certificate to server and optionally verify server'sTimo Sirainen
certificate. See the -ssl_* options for /SERVER and /SERVER ADD. Patch by Joel Eriksson <je-irssi@bitnux.com>. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@3146 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-10-21/SERVER and /DISCONNECT handlers moved from irc to core.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2969 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-09-14window->active_server used to hold non-connected servers, but that wasTimo Sirainen
removed before because it created several problems, especially with scripts. however that change made /server and /disconnect annoying to use with non-connected servers. so, now we have window->connect_server as well. either active_server or connect_server is set, but never both. commands that can deal properly with non-connected servers can now use the connect_server, while everyone else happily thinks that no server is active. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2921 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-08-26A few missing parts from SSL patch.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2891 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-05-16Better !channel support - window items now have "visual_name" and channelsTimo Sirainen
and queries also have "name". Normally they're identical but with !channels the visible_name contains the short !channel name, while name contains full !ABCDEchannel name. The visible_name should be used whenever displaying the channel name, or as printtext()'s target. So, this breaks a few scripts in !channels, they need to be modified to use $channel->{visible_name} instead. Also /LAYOUT SAVE should finally work properly with !channels. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2797 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-03-15/SERVER ADD -ircnet value wasn't strdup()ed so it might have done somethingTimo Sirainen
nasty, at least during quit might have crashed. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2617 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-03-10Added -4 | -6 to /SERVER ADD syntax.Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2572 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-03-10/SERVER ADD -ircnet should add the network to config with the same case asTimo Sirainen
in /IRCNET list. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2568 dbcabf3a-b0e7-0310-adc4-f8d773084564
2002-01-24/SERVER ADD: added -noproxy option and -proxy which just removes theTimo Sirainen
-noproxy. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@2344 dbcabf3a-b0e7-0310-adc4-f8d773084564
2001-02-17Config file: ircnets -> chatnets, added type = "chat protocol" toTimo Sirainen
chatnet config. Moved reading chatnets to core. Lots of other multiprotocol updates. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@1237 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-12-09-querychans option for servers and ircnets which specifies how manyTimo Sirainen
channels to query in one line with MODE/WHO commands after joined to a number of channels. Default is 10 which works usually, with some very stupid servers (just found one) this has to be set to 1 however. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@981 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-11-17windows.h conflicted with microsoft's windows.h :) renamed windows.[ch] toTimo Sirainen
fe-windows.[ch] git-svn-id: http://svn.irssi.org/repos/irssi/trunk@846 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-10-28Cleaned up printtext.c, split part of it to formats.cTimo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@796 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-09-06/set autocreate_query -> /set autocreate_query_levelTimo Sirainen
fixes to /ircnet, /server and /channel commands other updates and fixes git-svn-id: http://svn.irssi.org/repos/irssi/trunk@649 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-08-27updatesTimo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@634 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-08-26Lots of moving stuff around - hopefully I didn't break too much :)Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@632 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-08-14Some server reconnection fixes. Reconnect now allows you to haveTimo Sirainen
more than one reconnection to the same server. Changed the deinit() order in IRC module to cleanly free all memory. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@607 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-07-23Added syntaxes of all commands in comments, they're going to be used toTimo Sirainen
autogenerate help files. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@529 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-06-18Changed option handling in /commands. Irssi will now complain aboutTimo Sirainen
unknown options and missing option arguments. Renamed /SERVER -add, -remove and -list to /SERVER ADD, REMOVE and LIST. git-svn-id: http://svn.irssi.org/repos/irssi/trunk@365 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-06-04/IRCNET command.Timo Sirainen
PARAM_FLAG_NOQUOTES flag for cmd_get_params() git-svn-id: http://svn.irssi.org/repos/irssi/trunk@290 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-06-01/server -add messed up everything when modifying existing servers.Timo Sirainen
Now it also changes only the specified settings in the server instead of replacing it entirely. only the settings you change changed parts git-svn-id: http://svn.irssi.org/repos/irssi/trunk@266 dbcabf3a-b0e7-0310-adc4-f8d773084564
2000-05-04.. lots of changes ..Timo Sirainen
git-svn-id: http://svn.irssi.org/repos/irssi/trunk@197 dbcabf3a-b0e7-0310-adc4-f8d773084564