[libgdata] core: Validate SSL certificates for all connections



commit 6799f2c525a584dc998821a6ce897e463dad7840
Author: Philip Withnall <philip tecnocode co uk>
Date:   Thu Mar 8 00:09:08 2012 +0000

    core: Validate SSL certificates for all connections
    
    This prevents MitM attacks which use spoofed SSL certificates.
    
    Note that this bumps our libsoup requirement to 2.37.91.
    
    Closes: https://bugzilla.gnome.org/show_bug.cgi?id=671535

 configure.ac          |    2 +-
 gdata/gdata-service.c |    2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/configure.ac b/configure.ac
index a624296..78b0c30 100644
--- a/configure.ac
+++ b/configure.ac
@@ -33,7 +33,7 @@ AC_PATH_PROG([GLIB_MKENUMS],[glib-mkenums])
 # Requirements
 GLIB_REQS=2.30.0
 GIO_REQS=2.17.3
-SOUP_REQS=2.26.1
+SOUP_REQS=2.37.91
 OAUTH_REQS=0.9.4
 GTK_REQS=2.91.2
 
diff --git a/gdata/gdata-service.c b/gdata/gdata-service.c
index 93ac8fb..de9f020 100644
--- a/gdata/gdata-service.c
+++ b/gdata/gdata-service.c
@@ -2134,7 +2134,7 @@ _gdata_service_get_log_level (void)
 SoupSession *
 _gdata_service_build_session (void)
 {
-	SoupSession *session = soup_session_sync_new ();
+	SoupSession *session = soup_session_sync_new_with_options (SOUP_SESSION_SSL_USE_SYSTEM_CA_FILE, TRUE, NULL);
 
 #ifdef HAVE_GNOME
 	soup_session_add_feature_by_type (session, SOUP_TYPE_GNOME_FEATURES_2_26);



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]