Trusted fingerprints: public key fp vs certificate fp

[DarthGandalf]

Currently ZNC compares fingerprint of the whole certificate with the whitelist, not only the public key part. That breaks e.g. key pinning of freenode tor hidden service, which provides public key fingerprint; fp of the whole certificate changes every time letsencrypt cert is renewed.

openssl x509 -pubkey -noout < cert.crt shows the public key part of the certificate. Need to find out how to do it in C API.

Irssi seems to support this already.

[kushaldas]

This will be really helpful for Freenode+Tor users like me. 👍

[lessless]

same here, would be really helpful

[Mikaela]

The public key can also be gotten with gnutls-cli in case that is of any help for anyone.

└┌(%:~)┌- gnutls-cli chat.freenode.net:6697
...
        Public Key ID:
                sha1:f67d915f48fe77acb59231d32e7bb23db0430afd
                sha256:b575b498f1712f0042577568179b92fc4455ac198bdea6fae7fe3ed25046964e
...