Commit Graph

96 Commits

Author SHA1 Message Date
Solderpunk ec07491578 Check alternative subject names. 2020-05-17 22:36:10 +02:00
Solderpunk 094e3117c4 Better reporting of certificate errors. 2020-05-17 22:36:00 +02:00
Solderpunk 9ce8d2481a Use cryptography library to do better certificate checking, if it's available. 2020-05-17 20:38:06 +02:00
Solderpunk ca1a0a62e6 Cache certificates to disk in the expectation of more advanced cert wrangling in future. 2020-05-17 18:35:35 +02:00
Solderpunk 68e55d245a Add AV-98 contributors, in place of VF-1 contributors. 2020-05-17 17:57:34 +02:00
Solderpunk 991de05512 Immediately commit all changes to the TOFU DB, so it gets unlocked and multiple clients can access it at once. 2020-05-17 14:02:36 +02:00
Solderpunk 13f885c226 Make transient clients expire after 1 day, not 365! 2020-05-17 12:18:09 +02:00
Solderpunk d1412377da Initial implementation of TOFU security model. 2020-05-16 18:58:53 +02:00
jprjr 78e0134c8a spec states meta max length is 1024 2020-05-16 13:59:05 +00:00
jprjr 0b79cd174f enforce a maximum header line length 2020-05-16 13:58:33 +00:00
Vee c174836159 Add command to search GUS 2020-05-15 07:38:51 -04:00
Solderpunk d828965979 Fix bug introduced when refactoring rcfile path wrangling. 2020-05-14 09:37:12 +02:00
Solderpunk 08bc6e2102 Don't do client certificates in restricted mode. 2020-05-12 22:23:22 +02:00
Solderpunk 8af6d9e478 Better presentation of query prompts. 2020-05-12 22:00:35 +02:00
Solderpunk 74d8511474 Properly escape query text before putting it into a URL. 2020-05-12 22:00:17 +02:00
Solderpunk 42e81ee859 Don't assume a gopher-to-gemini proxy is running on localhost by default. 2020-05-12 21:20:36 +02:00
Solderpunk a05ecfad4f Add easy loading of previously generated certs. 2020-05-11 23:27:48 +02:00
Solderpunk 676ab85a9e Add support for transient client certificates. 2020-05-11 22:33:04 +02:00
Solderpunk cf92e12653 Make locations of files more consistent. 2020-05-10 22:51:33 +02:00
Solderpunk 0d49b3e859 Put bookmark and rc files in same location as certificates. 2020-05-10 18:53:31 +02:00
Solderpunk 34cfa54de6 Tiny tweak to Macros -> Patlabor theme change. :) 2020-05-10 18:47:07 +02:00
Solderpunk 94e796ee5e Opt out of transient certs for now, better messaging about certificates. 2020-05-10 18:46:16 +02:00
Solderpunk e0552df853 Add support for generating client certs (if openssl is installed). 2020-05-10 17:25:03 +02:00
Solderpunk d4e9feebc5 Small bugfix. 2020-05-10 17:00:30 +02:00
Solderpunk 24563acf6d Give 'cert' command a menu interface, and trigger a similar interface in response to status codes 6x. 2020-05-10 16:09:54 +02:00
Solderpunk b272a563cb Use ansiwrap if available. 2020-05-10 15:02:24 +02:00
Solderpunk 28cf34e585 Add version info. Closes #1. 2020-05-10 14:34:48 +02:00
Solderpunk d8ef677ab1 Make sure supplied filenames exist. 2020-05-10 14:32:41 +02:00
Solderpunk cbb7b3fd6c Offer to reload previously used certificates for domains visited earlier. 2020-05-10 14:19:12 +02:00
Solderpunk d04c472600 Reduce code duplication. 2020-05-10 14:17:35 +02:00
Solderpunk cd2faaa958 Fix input parsing bug. 2020-05-10 14:17:20 +02:00
Solderpunk 6cb9f6a65e Nicer prompts. 2020-05-10 14:17:07 +02:00
Solderpunk 3207f8b382 Reduce code duplication. 2020-05-10 13:48:25 +02:00
Solderpunk 6bb2e20e69 Try to prevent 'certificate leaks' when visiting a new domain with an active client cert. 2020-05-10 13:44:40 +02:00
Solderpunk a2aff0d2a5 Move client certificate details out of the options dictionary and into their own, so that the 'cert' and 'set' commands don't become parallel interfaces to the same config. 2020-05-10 12:59:26 +02:00
Solderpunk 6d4c8e2dc9 First stab at putting an interactive interface on client certificates. 2020-05-10 12:35:46 +02:00
Solderpunk f6f0c5d34a Various inscrutible TLS changes. 2020-04-12 21:20:29 +02:00
Solderpunk 8b3e77fa41 Add restricted mode for gemini.circumlunar.space kiosk. 2020-04-07 22:46:05 +02:00
Solderpunk 8e5e175a7e Fix TLS for Python 3.8. See #6. 2020-04-02 22:15:39 +02:00
Solderpunk c934237cbe Enhance bookmarks command to accept a numeric index. Closes #4. 2020-03-24 20:41:37 +01:00
Michael Lazar b078e4315d Add support for TLS client certificates 2020-03-22 22:12:00 -04:00
Solderpunk a701145459 Handle unorderd items and headings. 2020-03-07 21:30:34 +01:00
Solderpunk 7f89b94f25 Handle preformatted content. 2020-03-07 21:11:49 +01:00
Solderpunk 6c017f3b96 Wrap long lines. 2020-02-03 21:34:17 +01:00
Solderpunk c0f4c8eae4 Open HTTP(S) links in the system browser. 2019-11-05 19:58:04 +02:00
Solderpunk 0fdf9ac473 Don't clobber https scheme of absolute URLs when normalising. 2019-11-05 19:57:29 +02:00
Solderpunk dc6c64c741 Fix redirect logic, and handle permanent redirects. 2019-10-15 22:12:32 +03:00
Solderpunk 8c5c779415 Permit manual control of redirects. 2019-10-14 19:47:02 +03:00
Solderpunk a0e4acf352 Try not to get trapped by excessive or looping redirects. 2019-10-13 20:42:04 +03:00
lel 210d0459eb Simplify trailing slash handling to make going up work 2019-09-28 03:28:01 -04:00