summary refs log tree commit diff
path: root/extra/palaver/configure
diff options
context:
space:
mode:
authorJune McEnroe <june@causal.agency>2021-08-20 15:48:19 -0400
committerJune McEnroe <june@causal.agency>2021-08-20 15:48:19 -0400
commit26e6c331f51a5b23c39ffa8e172ab776fdbc3f06 (patch)
tree3e770f23ba26e4af739b031c177edbc976271a51 /extra/palaver/configure
parentUse seprintf to build final 005 (diff)
downloadpounce-26e6c331f51a5b23c39ffa8e172ab776fdbc3f06.tar.gz
pounce-26e6c331f51a5b23c39ffa8e172ab776fdbc3f06.zip
Use "secure" libtls ciphers
Ported from catgirl:

commit 585039fb6e5097cfd16bc083c6d1c9356b237882
Author: Klemens Nanni <klemens@posteo.de>
Date:   Sun Jun 20 14:42:10 2021 +0000

Use "secure" libtls ciphers

d3e90b6 'Use libtls "compat" ciphers' from 2018 fell back to "compat"
ciphers to support irc.mozilla.org which now yields NXDOMAIN.

All modern networks (should) support secure ciphers, so drop the
hopefully unneeded list of less secure ciphers by avoiding
tls_config_set_ciphers(3) and therefore sticking to the "secure" aka.
"default" set of ciphers in libtls.

A quick check shows that almost all of the big/known IRC networks
support TLS1.3 already;  those who do not at least comply with
SSL_CTX_set_cipher_list(3)'s "HIGH" set as can be tested like this:

		echo \
		  irc.hackint.org \
		  irc.tilde.chat \
		  irc.libera.chat \
		  irc.efnet.nl \
		  irc.oftc.net |
		xargs -tn1 \
		openssl s_client -quiet -cipher HIGH -no_ign_eof -port 6697 -host
Diffstat (limited to 'extra/palaver/configure')
0 files changed, 0 insertions, 0 deletions
22:39:29 -0500'>2020-02-11Add -R restricted flagJune McEnroe 2020-02-11Add chroot targetJune McEnroe 2020-02-11Exit focus and paste modes on err exitJune McEnroe 2020-02-11Add startup GPLv3 note and URLJune McEnroe 2020-02-11Make sure -D_GNU_SOURCE ends up in CFLAGS on LinuxJune McEnroe 2020-02-11Add note about setting PKG_CONFIG_PATHJune McEnroe 2020-02-11Rename query ID on nick changeJune McEnroe 2020-02-11Call completeClear when closing a windowJune McEnroe 2020-02-11Don't insert color codes for non-mentionsJune McEnroe 2020-02-11Take first two words in colorMentionsJune McEnroe 2020-02-11Use time_t for save signatureJune McEnroe 2020-02-11Set self.nick to * initiallyJune McEnroe 2020-02-11Define ColorCap instead of hardcoding 100June McEnroe 2020-02-11Move hash to top of chat.hJune McEnroe 2020-02-11Move base64 out of chat.hJune McEnroe 2020-02-11Move XDG_SUBDIR out of chat.hJune McEnroe 2020-02-11Fix whois idle unit calculationJune McEnroe 2020-02-11Cast towupper to wchar_tJune McEnroe 2020-02-11Cast set but unused variables to voidJune McEnroe 2020-02-11Declare strlcatJune McEnroe 2020-02-11Check if VDSUSP existsJune McEnroe 2020-02-11Fix completeReplace iterationJune McEnroe 2020-02-11Use pkg(8) to configure on FreeBSDJune McEnroe 2020-02-11Remove legacy codeJune McEnroe 2020-02-11Add INSTALLING section to READMEJune McEnroe