[Bug 57130] interactive TLS certificate verification

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=57130

--- Comment #2 from Simon McVittie <simon.mcvittie at collabora.co.uk> ---
This is going to be non-trivial. The GIO TLS code's interface to accept
certificates interactively requires you to either:

* do I/O in a thread per server (and block in that thread while waiting for the
UI, or in our case the D-Bus calls)

or

* respond to a failed attempt by remembering the certificate, then doing an
interactive prompt about that certificate; if the user says "yes that's OK",
retry connecting. When GIO tells us (again) that the certificate is bad,
compare it with the one the user accepted, and if it's the same one (!),
synchronously reply "yes that's OK".

This would probably require changing the code so we have 1 IdleConnection : up
to 2 IdleServerConnections.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.