From f30b1a519771ac49e2b03640e742fdb0a246bd81 Mon Sep 17 00:00:00 2001 From: salmonik Date: Thu, 29 Oct 2026 22:22:27 +0100 Subject: v2.4.0: key stored credentials by certificate fingerprint --- docs/TESTING.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) (limited to 'docs/TESTING.md') diff --git a/docs/TESTING.md b/docs/TESTING.md index 15b060c..fe302a9 100644 --- a/docs/TESTING.md +++ b/docs/TESTING.md @@ -124,6 +124,20 @@ Use an 80-column terminal because several output lines are width-sensitive. one row with `winnings = 0`, `details.result = "abandoned"` and `details.reason = "server_restart"`. +## Manual identity / credential checklist + +1. Connect through one address, `register` and `login`. `hosts` shows the + fingerprint. +2. `disconnect`, then `connect` through another address that reaches the same + server (for example `10.0.0.100` when you first used `127.0.0.1`). The client + must print `Authenticated as ` without asking for a password. +3. `hosts` must list both addresses on one line under one fingerprint. +4. `forget-host ` must say the credentials were kept and name + the remaining address. Connecting through the remaining address still + authenticates automatically. +5. `forget-host ` must say trust and credentials were cleared. + The next connect is a first contact and does not authenticate. + ## Manual server checks - Register, log out, log in again (bcrypt path). -- cgit v1.2.3