about summary refs log tree commit diff
path: root/scripts/sandman.m
diff options
context:
space:
mode:
authorKlemens Nanni <klemens@posteo.de>2021-06-29 15:34:03 +0200
committerJune McEnroe <june@causal.agency>2021-07-13 15:21:57 -0400
commitae332f6e8d26487ba4556283dcde2bf96da76467 (patch)
treebff82b817567a824ca3e644abed9b3c36388ffe6 /scripts/sandman.m
parentExplicitly clear TLS secrets afer handshake (diff)
downloadcatgirl-ae332f6e8d26487ba4556283dcde2bf96da76467.tar.gz
catgirl-ae332f6e8d26487ba4556283dcde2bf96da76467.zip
Perform TLS handshake after final pledge
ircConnect() yields a connected TCP socket after which "inet dns" is
no longer needed.

Possibly having loaded private key material, it seems a tad more
comforting to speak TLS *after* dropping any network capabilities
(except for socket read/write to the IRC host, of course).

Instead of moving the final pledge into irc.c:ircConnect() and thus
complicating the code around pledge across two C modules, simply
stub out an mnemonic ircHandshake() and call that explicitly.

This restores behaviour gained with
981ebc4 "Remove explicit tls_handshake(3) from ircConnect" which
was reverted for other reasons.
Diffstat (limited to 'scripts/sandman.m')
0 files changed, 0 insertions, 0 deletions
mmit/www/git.causal.agency/source-filter.sh?id=62b345dc27d1fa61c6dbe9e02b684f6efe347280&follow=1'>Hide line numbers when rendering mdocJune McEnroe 2019-12-18Customize cgit CSSJune McEnroe 2019-12-18Use :target rather than :focus pseudo-classJune McEnroe 2019-12-18Copy cgit auxiliary binaries properlyJune McEnroe 2019-12-18Add git.causal.agency cgit configJune McEnroe 2019-12-18Bail from hi if input is binaryJune McEnroe 2019-12-16Post "cgit setup"June McEnroe