summaryrefslogtreecommitdiff
path: root/gnu/services
diff options
context:
space:
mode:
authorMaxim Cournoyer <maxim.cournoyer@gmail.com>2025-04-11 10:58:18 +0900
committerMaxim Cournoyer <maxim.cournoyer@gmail.com>2025-04-14 10:34:51 +0900
commita42630e85b82ad2b5cecc9163a422084cf09ff4c (patch)
tree3a82fa95cc79db11213ce7ae6de473930162621d /gnu/services
parentf47ff4fccec1a5ec8b939e9d7f54dffb4ef673d9 (diff)
services: ngircd: Expose a new ssl-verify? option.
* gnu/services/messaging.scm (ngircd-server) [ssl-verify?]: New field. * doc/guix.texi (Messaging Services): Regenerate doc. Change-Id: Ia2d6e557bd89448d8cc2d1cd88e606e2b1ef5029
Diffstat (limited to 'gnu/services')
-rw-r--r--gnu/services/messaging.scm10
1 files changed, 9 insertions, 1 deletions
diff --git a/gnu/services/messaging.scm b/gnu/services/messaging.scm
index c0f1f83d66e..6607fa296a7 100644
--- a/gnu/services/messaging.scm
+++ b/gnu/services/messaging.scm
@@ -141,6 +141,7 @@
ngircd-server-group
ngircd-server-passive?
ngircd-server-ssl-connect?
+ ngircd-server-ssl-verify?
ngircd-channel
ngircd-channel?
ngircd-channel-name
@@ -1357,7 +1358,14 @@ connections (passive, which is the default).")
specified.")
(ssl-connect?
(maybe-boolean #f)
- "Connect to the remote server using TLS/SSL.")
+ "Set to @code{#t} to enforce the use of TLS to connect to the remote
+server.")
+ (ssl-verify?
+ (maybe-boolean #t)
+ "Set to @code{#f} to disable the verification of the TLS certificate
+presented by the remote server. This can be useful if the remote server uses
+a self-signed certificate. Beware that this degrades security by enabling
+man-in-the-middle attacks, as the @emph{remote site is not verified at all}.")
(prefix ngircd-))
(define list-of-ngircd-servers?