automatic prompt for certs broke system trusted tls endpoints
since it ignored the currently loaded certs as trusted.
if they are available and we can establish TLS we should
proceed instead of failing and asking users to always use
`--insecure`
--insecure does not have an effect when running mc in a non-terminal. This
commit fixes the behavior by ignoring the prompt from trusting self
signed certificate when --insecure is passed as well.
This commit adds an extension to the `alias set`
command. When adding an alias fails due to a TLS
trust error - i.e. remote peer certificate verification
fails - `mc` fetches the remote peer certificate,
computes the public key fingerprint and asks the user
to confirm the fingerprint.
When the user confirms the fingerprint, the certificate
is added to the `CAs` directory.
This allows users to use a TOFU authentication with
self-signed certificates - similar to SSH.
Signed-off-by: Andreas Auernhammer <hi@aead.dev>
```
mc alias set
alias remove
alias list
```
are new commands that replace mc config host sub-commands.
mc config host will still be available but hidden for backward
compatiblity. The JSON output is also kept if the user is running mc
config host command.