Package: irssi
Version: 1.4.3-2
Severity: normal
Tags: upstream
X-Debbugs-Cc: debbug.ir...@sideload.33mail.com

A command like this was given:

  /server add -tls_cert ~/certs/oftc.pem -notls_verify -noauto -network toroftc
              -tls_pinned_pubkey 
63:0F:19:BB:AF:61:5A:9F:B1:03:98:0A:70:4A:DA:E9:E6:C9:73:9E:1F:53:AD:DD:83:43:E4:E1:71:3A:50:B5
              127.0.0.1 16002

The public key that was supplied turned out to be unusable. So the
following was given to clear it:

  /server modify -tls_pinned_pubkey '' 127.0.0.1 16002

The command had no effect. This was also attempted:

  /server modify -notls_pinned_pubkey 127.0.0.1 16002

that resulted in an error. There is apparently no way to clear a
pinned key.

Workaround:

The config file must be opened in a text editor and the
tls_pinned_pubkey field must be located and removed manually.

-- System Information:
Debian Release: 12.10
  APT prefers stable-updates
  APT policy: (990, 'stable-updates'), (990, 'stable-security'), (990, 
'stable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-28-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages irssi depends on:
ii  libc6                       2.36-9+deb12u10
ii  libglib2.0-0                2.74.6-2+deb12u5
ii  libperl5.36                 5.36.0-7+deb12u1
ii  libssl3                     3.0.15-1~deb12u1
ii  libtinfo6                   6.4-4
ii  perl                        5.36.0-7+deb12u1
ii  perl-base [perlapi-5.36.0]  5.36.0-7+deb12u1

irssi recommends no packages.

Versions of packages irssi suggests:
ii  irssi-scripts  20220704

-- no debconf information

Reply via email to