adam/znc
1
0 Fork 0
mirror of https://github.com/znc/znc.git synced 2026-10-31 01:32:02 +01:00
Code Issues 362 Packages Projects Releases Wiki Activity

certauth: Provide a way to choose certauth ports #855

New Issue
Open
opened 2026-10-05 04:48:44 +02:00 by adam · 0 comments
adam commented 2026-10-05 04:48:44 +02:00
Owner
Copy link
Copy source

In order to get clients to send a certificate when connecting, certauth sets SSL_VERIFY_PEER on all ports. This makes sense for the default case, but it would be nice to be able to configure this on a per-listener basis. Sample usecase: setting SSL_VERIFY_PEER on port 6697 would allow you to use certauth for IRC connections, while having it unset on port 443 would let you access the web console without getting prompted for a client certificate.

In order to get clients to send a certificate when connecting, certauth [sets `SSL_VERIFY_PEER` on all ports][all ports]. This makes sense for the default case, but it would be nice to be able to configure this on a per-listener basis. Sample usecase: setting `SSL_VERIFY_PEER` on port 6697 would allow you to use certauth for IRC connections, while having it unset on port 443 would let you access the web console without getting prompted for a client certificate. [all ports]: https://github.com/znc/znc/blob/znc-1.7.0/modules/certauth.cpp#L46-L52 <!-- github-sync-id:336342750 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/znc#855