[shotwell] Have all soup sessions validate TLS certificates

[Michael Catanzaro <mcatanzaro src gnome org>]

commit f045b7a13cc1efbfa3054338d0edf569df51f4e7
Author: Michael Catanzaro <mcatanzaro igalia com>
Date:   Fri Dec 4 17:34:17 2015 +0100

    Have all soup sessions validate TLS certificates
    
    Note that this commit is *not* sufficient to fix certificate verification
    on its own. The port to WK2 is also required, else WebKit's soup session
    will not verify certificates.
    
    https://bugzilla.gnome.org/show_bug.cgi?id=751709

 plugins/common/RESTSupport.vala                    |    1 +
 .../shotwell-publishing/FacebookPublishing.vala    |    1 +
 2 files changed, 2 insertions(+), 0 deletions(-)
---
diff --git a/plugins/common/RESTSupport.vala b/plugins/common/RESTSupport.vala
index 3ea8042..348f7ac 100644
--- a/plugins/common/RESTSupport.vala
+++ b/plugins/common/RESTSupport.vala
@@ -20,6 +20,7 @@ public abstract class Session {
     public Session(string? endpoint_url = null) {
         this.endpoint_url = endpoint_url;
         soup_session = new Soup.SessionAsync();
+        this.soup_session.ssl_use_system_ca_file = true;
     }
     
     protected void notify_wire_message_unqueued(Soup.Message message) {
diff --git a/plugins/shotwell-publishing/FacebookPublishing.vala 
b/plugins/shotwell-publishing/FacebookPublishing.vala
index 4efe7f7..5d32a07 100644
--- a/plugins/shotwell-publishing/FacebookPublishing.vala
+++ b/plugins/shotwell-publishing/FacebookPublishing.vala
@@ -1473,6 +1473,7 @@ internal class GraphSession {
         this.soup_session.timeout = 15;
         this.access_token = null;
         this.current_message = null;
+        this.soup_session.ssl_use_system_ca_file = true;
     }
 
     ~GraphSession() {