diff options
| author | Russell King <rmk+kernel@arm.linux.org.uk> | 2016-06-05 14:43:34 +0100 |
|---|---|---|
| committer | Russell King <rmk+kernel@armlinux.org.uk> | 2016-06-05 17:47:57 +0100 |
| commit | c9c9ffd06f4751e9ffd714d80ab492316000c3ce (patch) | |
| tree | b286cd210a50f470538d02b812f3f0570dc00f2e /src/s_user.c | |
| parent | 38b49b8eb23738f78776db1e3263175e760b66c2 (diff) | |
Add initial support for client certificate fingerprints
Networks such as Freenode and OFTC use client certificates to identify
users and servers, not only for services, but also for server operator
status and auth blocks.
This allows us to use stronger certificates for authentication rather
than passwords.
Diffstat (limited to 'src/s_user.c')
| -rw-r--r-- | src/s_user.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/s_user.c b/src/s_user.c index 1017c05..be041cf 100644 --- a/src/s_user.c +++ b/src/s_user.c @@ -1181,6 +1181,10 @@ user_welcome(struct Client *source_p) sendto_one(source_p, ":%s NOTICE %s :*** Connected securely via %s", me.name, source_p->name, ssl_get_cipher(source_p->localClient->fd.ssl)); + if (!EmptyString(source_p->certfp)) + sendto_one(source_p, + ":%s NOTICE %s: *** Your client certificate fingerprint is %s", + me.name, source_p->name, source_p->certfp); } #endif |