aniani/irssi
1
0
Fork 0
mirror of https://github.com/irssi/irssi.git synced 2024-11-03 04:27:19 -05:00
Code
53d772e48b
irssi/docs/help/in
History
Alexander Færøy 5146ce9631
Add x509 certificate and public key pinning support. 
This patch adds two new options to /CONNECT and /SERVER to let the user
pin either an x509 certificate and/or the public key of a given server.

It is possible to fetch the certificate outside of Irssi itself to
verify the checksum. To fetch the certificate call:

    $ openssl s_client -connect chat.freenode.net:6697 < /dev/null 2>/dev/null | \
      openssl x509 > freenode.cert

This will download chat.freenode.net:6697's TLS certificate and put it into the
file freenode.cert.

-tls_pinned_cert
----------------

This option allows you to specify the SHA-256 hash of the x509
certificate. When succesfully connected to the server, irssi will verify
that the given server certificate matches the pin set by the user.

The SHA-256 hash of a given certificate can be verified outside of irssi
using the OpenSSL command line tool:

    $ openssl x509 -in freenode.cert -fingerprint -sha256 -noout

-tls_pinned_pubkey
------------------

This option allows you to specify the SHA-256 hash of the subject public key
information section of the server certificate. This section contains both the
cryptographic parameters for the public key, but also information about the
algorithm used together with the public key parameters.

When succesfully connected to the server, irssi will verify that the
given public key matches the pin set by the user.

The SHA-256 hash of a public key can be verified outside of irssi using
the OpenSSL command line tool:

    $ openssl x509 -in freenode.cert -pubkey -noout | \
      openssl pkey -pubin -outform der | \
      openssl dgst -sha256 -c | \
      tr a-z A-Z

It is possible to specify both -tls_pinned_cert and -tls_pinned_pubkey
together.
2016-10-22 22:01:50 +02:00
..
accept.in Syntax format changes for A-C commands 2014-07-03 21:41:10 +02:00
action.in Syntax documentation rewrite for M-commands 2014-07-08 21:02:35 +02:00
admin.in Syntax format changes for A-C commands 2014-07-03 21:41:10 +02:00
alias.in Updated ALIAS help 2014-08-07 23:36:53 +02:00
away.in Correct error/typo "You"->"Your" in help message 2016-04-30 09:44:26 +02:00
ban.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
beep.in Syntax format changes for A-C commands 2014-07-03 21:41:10 +02:00
bind.in Syntax format changes for A-C commands 2014-07-03 21:41:10 +02:00
cat.in Syntax format changes for A-C commands 2014-07-03 21:41:10 +02:00
cd.in Syntax format changes for A-C commands 2014-07-03 21:41:10 +02:00
channel.in Add info about MODIFY to help files 2016-06-18 17:59:59 +02:00
clear.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
completion.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
connect.in Add x509 certificate and public key pinning support. 2016-10-22 22:01:50 +02:00
ctcp.in Syntax format changes for A-C commands 2014-07-03 21:41:10 +02:00
cycle.in Syntax format changes for A-C commands 2014-07-03 21:41:10 +02:00
dcc.in Update the documentation about DCC 2016-03-22 16:03:05 +01:00
dehilight.in
deop.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
devoice.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
die.in
disconnect.in Documentation fix for #185 2014-12-08 21:28:02 +01:00
echo.in typo fixes - https://github.com/vlajos/misspell_fixer 2014-11-08 22:26:53 +00:00
eval.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
exec.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
flushbuffer.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
format.in Syntax documentation rewrite for F-commands 2014-07-04 20:38:37 +02:00
hash.in Syntax documentation rewrite for H-I-commands 2014-07-05 22:16:35 +02:00
help.in Syntax documentation rewrite for H-I-commands 2014-07-05 22:16:35 +02:00
hilight.in Wrong order in the arguments in /hilight example, -mask doesn't take a parameter 2016-07-17 17:28:21 +02:00
ignore.in Remove duplicate example from ignore.in 2014-10-27 03:44:28 -07:00
info.in Syntax documentation rewrite for H-I-commands 2014-07-05 22:16:35 +02:00
invite.in Syntax documentation rewrite for H-I-commands 2014-07-05 22:16:35 +02:00
irssiproxy.in Rename /proxy command to /irssiproxy for clarity 2015-06-14 11:57:11 -03:00
ison.in Syntax documentation rewrite for H-I-commands 2014-07-05 22:16:35 +02:00
join.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
kick.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
kickban.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
kill.in Syntax documentation rewrite for J-K commands 2014-07-06 15:00:46 +02:00
knock.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
knockout.in Syntax documentation rewrite for J-K commands 2014-07-06 15:00:46 +02:00
lastlog.in lastlog doc fix 2015-05-14 13:06:50 +01:00
layout.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
levels.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
links.in Syntax documentation rewrite for L-commands 2014-07-07 19:47:51 +02:00
list.in Revert "Removed the obsolete SQUERY and SERVLIST commands" 2016-03-29 22:41:01 +02:00
load.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
log.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
lusers.in Syntax documentation rewrite for L-commands 2014-07-07 19:47:51 +02:00
Makefile.am.gen
map.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
me.in Syntax documentation rewrite for M-commands 2014-07-08 21:02:35 +02:00
mircdcc.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
mode.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
motd.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
msg.in Documentation fix for #185 2014-12-08 21:28:02 +01:00
names.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
nctcp.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
netsplit.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
network.in Add info about MODIFY to help files 2016-06-18 17:59:59 +02:00
nick.in Syntax documentation rewrite for N-commands. 2014-07-09 18:21:39 +02:00
notice.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
notify.in Syntax documentation rewrite for N-commands. 2014-07-09 18:21:39 +02:00
op.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
oper.in Syntax documentation rewrite of O and P commands 2014-07-10 20:43:52 +02:00
part.in Syntax documentation rewrite of O and P commands 2014-07-10 20:43:52 +02:00
ping.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
query.in Syntax documentation rewrite for Q-commands 2014-07-12 18:46:44 +02:00
quit.in Syntax documentation rewrite for Q-commands 2014-07-12 18:46:44 +02:00
quote.in Fixed an example of QUOTE 2014-07-13 14:10:40 +02:00
rawlog.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
recode.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
reconnect.in Syntax rewrite for R-commands 2014-07-15 19:52:56 +02:00
rehash.in Syntax rewrite for R-commands 2014-07-15 19:52:56 +02:00
reload.in Syntax rewrite for R-commands 2014-07-15 19:52:56 +02:00
restart.in Syntax rewrite for R-commands 2014-07-15 19:52:56 +02:00
rmreconns.in Syntax rewrite for R-commands 2014-07-15 19:52:56 +02:00
rmrejoins.in Syntax rewrite for R-commands 2014-07-15 19:52:56 +02:00
save.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
sconnect.in Syntax rewrite for S-commands 2014-07-30 14:29:06 +02:00
script.in Document the addition of the -autorun switch for /script reset. 2016-09-11 17:05:03 +02:00
scrollback.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
server.in Add x509 certificate and public key pinning support. 2016-10-22 22:01:50 +02:00
servlist.in Revert "Removed the obsolete SQUERY and SERVLIST commands" 2016-03-29 22:41:01 +02:00
set.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
silence.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
squery.in Revert "Removed the obsolete SQUERY and SERVLIST commands" 2016-03-29 22:41:01 +02:00
squit.in Syntax rewrite for S-commands 2014-07-30 14:29:06 +02:00
stats.in Syntax rewrite for S-commands 2014-07-30 14:29:06 +02:00
statusbar.in Syntax rewrite for S-commands 2014-07-30 14:29:06 +02:00
time.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
toggle.in Revert "Network and IPv{4,6} related changes" 2015-09-22 21:59:17 +02:00
topic.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
trace.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
ts.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
unalias.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
unban.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
unignore.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
unload.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
unnotify.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
unquery.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
unsilence.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
upgrade.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
uptime.in Wrote the missing syntax documentation for UPTIME 2014-07-06 02:44:28 +02:00
userhost.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
ver.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
version.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
voice.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
wait.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
wall.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
wallops.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
who.in Applied grammar and styling corrections 2014-08-07 22:00:40 +02:00
whois.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
whowas.in Syntax rewrite of U-Z commands 2014-08-05 22:00:30 +02:00
window.in Improve the WINDOW help 2015-09-23 14:21:27 +02:00