v2.4.0: key stored credentials by certificate fingerprint

1 files changed, 14 insertions, 0 deletions

diff --git a/docs/TESTING.md b/docs/TESTING.md
index 15b060c..fe302a9 100644
--- a/docs/TESTING.md
+++ b/docs/TESTING.md
@@ -124,6 +124,20 @@ Use an 80-column terminal because several output lines are width-sensitive.
    one row with `winnings = 0`, `details.result = "abandoned"` and
    `details.reason = "server_restart"`.
 
+## Manual identity / credential checklist
+
+1. Connect through one address, `register` and `login`. `hosts` shows the
+   fingerprint.
+2. `disconnect`, then `connect` through another address that reaches the same
+   server (for example `10.0.0.100` when you first used `127.0.0.1`). The client
+   must print `Authenticated as <user>` without asking for a password.
+3. `hosts` must list both addresses on one line under one fingerprint.
+4. `forget-host <first address>` must say the credentials were kept and name
+   the remaining address. Connecting through the remaining address still
+   authenticates automatically.
+5. `forget-host <last address>` must say trust and credentials were cleared.
+   The next connect is a first contact and does not authenticate.
+
 ## Manual server checks
 
 - Register, log out, log in again (bcrypt path).