pounce, branch 1.1IRC bouncer
https://git.causal.agency/pounce/atom?h=1.12020-01-18T04:24:54+00:00Use Xr for the first "pounce" in README2020-01-18T04:24:54+00:00C. McEnroejune@causal.agency2020-01-18T04:24:54+00:00urn:sha1:3634cf617be230843f62e18aabf5d5a717256ca7Add litterbox to README2020-01-18T04:23:03+00:00C. McEnroejune@causal.agency2020-01-18T04:23:03+00:00urn:sha1:8e413d7412fdd6f2762737e66ee2a5f3d61fb08eRename SASL EXTERNAL section to CertFP2020-01-17T23:46:38+00:00C. McEnroejune@causal.agency2020-01-17T23:46:38+00:00urn:sha1:99ba2b6dc4bfde1b06273093f1c238264edf1bcfDocument process of generating client certificates2020-01-17T21:47:24+00:00C. McEnroejune@causal.agency2020-01-17T21:47:24+00:00urn:sha1:cd3128597931b10905c5c90b758bcb7a7bc7e915Set certificate expiry to 10 years2020-01-16T16:23:12+00:00C. McEnroejune@causal.agency2020-01-16T16:23:12+00:00urn:sha1:96438f54ebf72576aee22a5f61fe6334b78be1da
I'm pretty sure any kind of "renewing" of these is going to suck, so
just set it long enough that the world will probably be ash by then.
Allow signing by CA in -g2020-01-13T02:51:13+00:00C. McEnroejune@causal.agency2020-01-13T02:51:13+00:00urn:sha1:76ff36551f5b344a8c9eaa5c1cdd6a081da5c335Clean up documentation for -A2020-01-13T00:47:30+00:00C. McEnroejune@causal.agency2020-01-13T00:47:30+00:00urn:sha1:21c965b500884d17f1fd40ab483058c39bbe10d5Rename all local-related options to local-2020-01-12T23:40:28+00:00C. McEnroejune@causal.agency2020-01-12T23:37:32+00:00urn:sha1:d24f385f9979c6c8a2e7bc0bc5f0b8bf5b659433
This disambiguates client-ca and client-pass from client-cert and
client-key, which apply to opposite sides of the program.
The old option names will continue to work.
Use the CAP_PREAD right2020-01-12T23:21:32+00:00C. McEnroejune@causal.agency2020-01-12T23:21:32+00:00urn:sha1:ee9a396f2225b68766f44a643470d66fd6a2b266
Required for the rewind call when loading the CA.
Add option to set local client CA2020-01-12T23:07:54+00:00C. McEnroejune@causal.agency2020-01-12T23:07:54+00:00urn:sha1:5e6094e437a5437ceb6b083d16995ea629a4d720
This is a little bit messy. Allows setting either -A or -W or both.
Implements SASL EXTERNAL for clients that expect that when connecting
with a client certificate.
Need to test that reloading still works inside capsicum, since I suspect
that rewind call may be blocked.
68cf30f9ae7613c68833e7cbc8e93adae2&follow=1'>Update README with install/config information