Weechat: Allow to specify ca certificates per network

[tyll]

I would like to connect to the hackint IRC network via TLS. They use their own root CA which I would like to specify only for the hackint network: http://hackint.eu/
However this does not seem to be possible, since there seems to be only a globel CA certificate setting. But setting it to the hackint CA would break accessing the Freenote IRC network. Therefore please allow to set the CA per IRC network additionally to the global default setting.

[Mikaela]

ZNC has similar issue https://github.com/znc/znc/issues/909 and on ZNC side it's know that there are more networks having their own root CA. I thought that issue mentioned them, but it doesn't seem to and I remember at least two other names in addition to hackint:

• OFTC
• EUnetIRC (or something similar)

[stfnm]

:+1: I'd like this too.

[flokli]

+1

[ghost]

can confirm this and would like to see a point in the future where one can set per network root ca files

[monkz]

Work around is:

wget https://hackint.eu/crt/rootca.crt
cat rootca.crt /etc/ssl/certs/ca-certificates.crt > weechat-rootca.crt

And inside weechat
/set weechat.network.gnutls_ca_file PATH/TO/weechat-rootca.crt
Please remember: This allows the owner of the HackInt CA to sign certificates for other networks! So it is far from ideal!

[shibumi]

any update on this issue?

[weechatter]

no