about summary refs log tree commit diff
diff options
context:
space:
mode:
authorJune McEnroe <june@causal.agency>2024-05-22 22:52:43 -0400
committerJune McEnroe <june@causal.agency>2024-05-22 22:52:43 -0400
commitcc350b5bb03de111efad5cbcd1e6d6bcc931097a (patch)
treed5e6d583f6820e874a91a92125767de5d3c3fb59
parentRewrite much of the options section of the manual (diff)
downloadcatgirl-cc350b5bb03de111efad5cbcd1e6d6bcc931097a.tar.gz
catgirl-cc350b5bb03de111efad5cbcd1e6d6bcc931097a.zip
Clean up the CertFP and self-signed sections
Diffstat (limited to '')
-rw-r--r--catgirl.125
1 files changed, 15 insertions, 10 deletions
diff --git a/catgirl.1 b/catgirl.1
index f4d5d65..2c4cce1 100644
--- a/catgirl.1
+++ b/catgirl.1
@@ -445,6 +445,10 @@ starts.
 .El
 .
 .Ss Configuring CertFP
+CertFP allows you to
+authenticate with NickServ during connection
+using a TLS client certificate
+rather than your account password.
 .Bl -enum
 .It
 Generate a new TLS client certificate:
@@ -452,32 +456,34 @@ Generate a new TLS client certificate:
 $ catgirl -g ~/.config/catgirl/example.pem
 .Ed
 .It
-Connect to the server using the certificate:
+Connect to the server using the certificate
+by adding the following configuration:
 .Bd -literal -offset indent
-cert = example.pem
-# or: $ catgirl -c example.pem
+cert example.pem
 .Ed
 .It
-Identify with services or use
-.Cm sasl-plain ,
+Identify with NickServ,
 then add the certificate fingerprint
 to your account:
 .Bd -literal -offset indent
 /ns CERT ADD
 .Ed
 .It
-Enable SASL EXTERNAL
+Enable SASL EXTERNAL in your configuration
 to require successful authentication
 when connecting
 (not possible on all networks):
 .Bd -literal -offset indent
-cert = example.pem
+cert example.pem
 sasl-external
-# or: $ catgirl -e -c example.pem
 .Ed
 .El
 .
 .Ss Connecting to Servers with Self-signed Certificates
+If connecting to a server fails
+with a certificate verification error
+due to a self-signed certificate,
+it needs to be trusted manually.
 .Bl -enum
 .It
 Connect to the server
@@ -490,8 +496,7 @@ Configure
 .Nm
 to trust the certificate:
 .Bd -literal -offset indent
-trust = example.pem
-# or: $ catgirl -t example.pem
+trust example.pem
 .Ed
 .El
 .