[Bug 63810] idle basically doesn't validate SSL/TLS certificates

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Mon Apr 22 19:53:57 CEST 2013


https://bugs.freedesktop.org/show_bug.cgi?id=63810

--- Comment #4 from Simon McVittie <simon.mcvittie at collabora.co.uk> ---
Created attachment 78341
  --> https://bugs.freedesktop.org/attachment.cgi?id=78341&action=edit
IdleServerConnection: check certificates properly,  except in the tests

---

I deliberately didn't add an ignore-ssl-errors boolean parameter, because there
doesn't seem much point, other than regression testing: all public IRC services
listen on a non-SSL port, and SSL vs. non-SSL cannot be auto-detected on IRC
(there is no STARTTLS support), so we only use SSL if the user has explicitly
set use-ssl to TRUE. So, users who would otherwise use ignore-ssl-errors can
just turn off use-ssl.

Meanwhile, private SSL-only IRC servers (e.g. a company's internal IRC) can and
should have a proper certificate, either from a company CA or from Startcom or
something.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.



More information about the telepathy-bugs mailing list