Certificate trust management ¶

When you encounter something requiring your attention and decision, you will be see Tk-dialog through the wish invocation. GnuTLS’es certtool is used for certificate information printing.

Certificate trust decision dialog (like above one) has multiple hotkeys:

• a – accept and save certificate chain to disk
• o – accept once per session (tofuproxy running)
• r – reject certificate
• q – reject certificate really once, same as closing the window
• n – next page of "their" certificate chain
• p – previous page of "their" certificate chain
• N – next page of "our" certificate chain
• P – previous page of "our" certificate chain

To list currently accepted, rejected, HTTP authorized, TLS client authenticated hosts:

$ cat fifos/list-{accepted,rejected,http-auth,tls-auth}

To remove knowledge of the host from any of the states mentioned above:

$ echo www.example.com > fifos/del-tls-auth