~noa/catgirl - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2021-07-13	Revert "Remove explicit tls_handshake(3) from ircConnect"	Klemens Nanni
	This reverts commit 981ebc4f12b88fbf52ed0352428a0612dd2c2568. This broke `-o' to print the server certificate; without explicit handshake there will be no tls_read(3) in this short code path.
2021-06-25	Remove explicit tls_handshake(3) from ircConnect	C. McEnroe
	The first call to ircFormat, which calls tls_write(3) in turn, will perform the handshake anyway. This way the handshake happens after the final pledge(2) call.
2021-06-25	Move setting CLOEXEC on socket to ircConnect	C. McEnroe

2021-06-21	Handle EINTR from connect(2) gracefully	Klemens Nanni
	Resizing the window early on may return early due to SIGWINCH. Continue asynchronously in that case instead of exiting.
2021-06-20	Use "secure" libtls ciphers	Klemens Nanni
	d3e90b6 'Use libtls "compat" ciphers' from 2018 fell back to "compat" ciphers to support irc.mozilla.org which now yields NXDOMAIN. All modern networks (should) support secure ciphers, so drop the hopefully unneeded list of less secure ciphers by avoiding tls_config_set_ciphers(3) and therefore sticking to the "secure" aka. "default" set of ciphers in libtls. A quick check shows that almost all of the big/known IRC networks support TLS1.3 already; those who do not at least comply with SSL_CTX_set_cipher_list(3)'s "HIGH" set as can be tested like this: echo \ irc.hackint.org \ irc.tilde.chat \ irc.libera.chat \ irc.efnet.nl \ irc.oftc.net \| xargs -tn1 \ openssl s_client -quiet -cipher HIGH -no_ign_eof -port 6697 -host
2021-06-20	Handle TLS_WANNT_POLL{IN,OUT} from tls_handshake(3)	C. McEnroe
	For blocking sockets it should be retried immediately.
2021-06-10	Only explicitly load the default CA file on OpenBSD	C. McEnroe

2021-06-10	Hoist loading default root certificates into ircConfig()	Klemens Nanni
	tls_connect_socket(3) in ircConnect() does that by default already unless tls_config_set_ca_file(3) was used. Loading CA certificates before connecting makes no practical difference except on OpenBSD where this allows for tighter unveil und pledge setups now that all required (TLS related) file I/O is finished by the time ircConnect() gets to do network I/O. In case of the hidden `-!' insecure flag which is implied by `-o' to print server certificates and exit, loading root certificates is not required at all; likewise, using explicit self signed server certificates will not involve certificate authorities either, hence load them only if needed.
2021-01-10	Print chain to stdout with -o	C. McEnroe

2021-01-09	Add -o and -t options to trust self-signed certificates	C. McEnroe

2020-08-21	Use a static buffer for base directory paths	C. McEnroe

2020-08-20	Use configPath to load TLS cert/priv	C. McEnroe

2020-08-04	Say "OpenSSL" in additional permission notices	C. McEnroe
	LibreSSL is "a modified version of that library".
2020-07-23	Remove tls_close error handling	C. McEnroe
	It seems that sometimes tls_close returns non-zero but tls_error returns a null string... We're exiting anyway, so just ignore it.
2020-06-24	Bump ParamCap to 254	C. McEnroe
	Apparently IRCds have decided that the 15-parameter limit doesn't matter anymore. 254 is the maximum number of single-byte parameters (following a single-byte command) which fit in a 512-byte CR-LF-terminated line. When everyone decides that the 512-byte line length limit doesn't matter either, I will delete my software and people can use some JavaScript garbage instead. This makes struct Message 2080 bytes, but there's only ever one or two of them around at once. Avoid passing it by value to handle.
2020-06-08	Add additional permission for linking with LibreSSL	C. McEnroe
	https://www.gnu.org/licenses/gpl-faq.en.html#GPLIncompatibleLibs
2020-02-17	Use the correct hostname in error message	multiplexd
	Previously, the remote host to which catgirl(1) is connecting was used in error reporting instead of the local bind address if the latter could not be resolved.
2020-02-16	Various small cleanups	C. McEnroe
	Haven't really gone through ui.c yet.
2020-02-15	Replace small integers in size_t with uint	C. McEnroe

2020-02-13	Explicitly close the TLS connection	C. McEnroe
	Just to be nice.
2020-02-13	Implement source address selection	multiplexd
	This commit adds a '-S' command line option and a "bind" configuration file option to specify the source address to bind to when connecting to the IRC server.
2020-02-06	Search for cert and priv in config dirs	C. McEnroe

2020-02-04	Align word wrapping with tab character	C. McEnroe
	Also fixes handling whitespace directly after control codes.
2020-02-02	Remove style string macros	C. McEnroe

2020-02-01	Implement the beginnings of UI	C. McEnroe
	It takes so much code to do anything in curses...
2020-02-01	Add -v flag	C. McEnroe

2020-02-01	Blindly implement login flow	C. McEnroe