From 9a82cfabe661c7891663952cf1e484c1877650ac Mon Sep 17 00:00:00 2001 From: frosty Date: Tue, 25 Aug 2026 23:41:58 -0400 Subject: feat: ignoring tls certificates --- libdino/src/application.vala | 2 ++ libdino/src/service/connection_manager.vala | 3 +++ 2 files changed, 5 insertions(+) (limited to 'libdino/src') diff --git a/libdino/src/application.vala b/libdino/src/application.vala index 8571120e..536ca949 100644 --- a/libdino/src/application.vala +++ b/libdino/src/application.vala @@ -17,9 +17,11 @@ public interface Application : GLib.Application { public abstract SearchPathGenerator? search_path_generator { get; set; } internal static string print_xmpp; + internal static bool ignore_tls_errors = false; private const OptionEntry[] options = { { "print-xmpp", 0, 0, OptionArg.STRING, ref print_xmpp, "Print XMPP stanzas identified by DESC to stderr", "DESC" }, + { "ignore-tls-errors", 0, 0, OptionArg.NONE, ref ignore_tls_errors, "Ignore TLS certificate errors", null }, { null } }; diff --git a/libdino/src/service/connection_manager.vala b/libdino/src/service/connection_manager.vala index 2ebddd92..afae1da8 100644 --- a/libdino/src/service/connection_manager.vala +++ b/libdino/src/service/connection_manager.vala @@ -384,6 +384,9 @@ public class ConnectionManager : Object { } public static bool on_invalid_certificate(string domain, TlsCertificate peer_cert, TlsCertificateFlags errors) { + if (Application.ignore_tls_errors) { + return true; + } if (domain.has_suffix(".onion") && errors == TlsCertificateFlags.UNKNOWN_CA) { // It's barely possible for .onion servers to provide a non-self-signed cert. // But that's fine because encryption is provided independently though TOR. -- cgit v1.3