tribes/guix
1
0
Fork 0
mirror of https://git.savannah.gnu.org/git/guix.git synced 2026-04-06 21:20:33 +02:00
Code Activity

services: ngircd: Expose a new ssl-verify? option.

Browse Source 
* gnu/services/messaging.scm (ngircd-server) [ssl-verify?]: New field.
* doc/guix.texi (Messaging Services): Regenerate doc.

Change-Id: Ia2d6e557bd89448d8cc2d1cd88e606e2b1ef5029
This commit is contained in:
Maxim Cournoyer
2025-04-11 10:58:18 +09:00
parent f47ff4fcce
commit a42630e85b
2 changed files with 18 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
doc/guix.texi
View File

@@ -30738,7 +30738,15 @@ Set to @code{#t} to disable automatic connection even if the port value
is specified.
@item @code{ssl-connect?} (default: @code{#f}) (type: maybe-boolean)
Connect to the remote server using TLS/SSL.
Set to @code{#t} to enforce the use of TLS to connect to the remote
server.
@item @code{ssl-verify?} (default: @code{#t}) (type: maybe-boolean)
Set to @code{#f} to disable the verification of the TLS certificate
presented by the remote server. This can be useful if the remote server
uses a self-signed certificate. Beware that this degrades security by
enabling man-in-the-middle attacks, as the @emph{remote site is not
verified at all}.
@end table

10
gnu/services/messaging.scm
View File

@@ -141,6 +141,7 @@
ngircd-server-group
ngircd-server-passive?
ngircd-server-ssl-connect?
ngircd-server-ssl-verify?
ngircd-channel
ngircd-channel?
ngircd-channel-name
@@ -1357,7 +1358,14 @@ connections (passive, which is the default).")
specified.")
(ssl-connect?
(maybe-boolean #f)
"Connect to the remote server using TLS/SSL.")
"Set to @code{#t} to enforce the use of TLS to connect to the remote
server.")
(ssl-verify?
(maybe-boolean #t)
"Set to @code{#f} to disable the verification of the TLS certificate
presented by the remote server. This can be useful if the remote server uses
a self-signed certificate. Beware that this degrades security by enabling
man-in-the-middle attacks, as the @emph{remote site is not verified at all}.")
(prefix ngircd-))
(define list-of-ngircd-servers?