feat: extend certificate pinning to all TLS protocols and add SSH

host-key pinning
2026-06-29 19:23:10 +02:00
parent e7ed3a334e
commit fc65ea8340
19 changed files with 355 additions and 25 deletions
@@ -37,7 +37,8 @@ NETWORK
    --dns-servers <IPs>      Custom DNS servers (comma-separated)
    --bind-interface <IFACE> Bind to specific network interface
    --allow-private          Allow connections to private/internal IPs
-    --pinned-cert <SHA256>   Certificate pinning (SHA-256 hash)
+    --pinned-cert <SHA256>   Certificate pinning (TLS: HTTPS, FTPS, Gemini, WebDAVS)
+    --pinned-host-key <FP>   SSH host-key pinning (SFTP): SHA256:<base64> or hex

 CURL-COMPATIBLE
    --header "K: V"           Custom HTTP header (repeatable)