diff options
author | Klemens Nanni | 2021-06-29 15:34:03 +0200 |
---|---|---|
committer | C. McEnroe | 2021-07-13 15:21:57 -0400 |
commit | ae332f6e8d26487ba4556283dcde2bf96da76467 (patch) | |
tree | bff82b817567a824ca3e644abed9b3c36388ffe6 /chat.c | |
parent | ae64d277b8204c156a30d2e8b6a958e5a31f2a7f (diff) |
Perform TLS handshake after final pledge
ircConnect() yields a connected TCP socket after which "inet dns" is no longer needed. Possibly having loaded private key material, it seems a tad more comforting to speak TLS *after* dropping any network capabilities (except for socket read/write to the IRC host, of course). Instead of moving the final pledge into irc.c:ircConnect() and thus complicating the code around pledge across two C modules, simply stub out an mnemonic ircHandshake() and call that explicitly. This restores behaviour gained with 981ebc4 "Remove explicit tls_handshake(3) from ircConnect" which was reverted for other reasons.
Diffstat (limited to 'chat.c')
-rw-r--r-- | chat.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/chat.c b/chat.c index f300315..058950f 100644 --- a/chat.c +++ b/chat.c @@ -345,6 +345,7 @@ int main(int argc, char *argv[]) { } #endif + ircHandshake(); if (pass) { ircFormat("PASS :"); ircSend(pass, strlen(pass)); |