[Telepathy] Certificate verification in empathy

[Stef Walter]

On 2010-12-07 02:42, Guillaume Desmottes wrote:
> Le lundi 06 décembre 2010 à 21:23 -0600, Stef Walter a écrit :
>> The work is on the trust-assertions branch [2] on my empathy
>> git.collabora.co.uk repository.
> 
> We try to have a "bug oriented" work flow in Empathy. Any chance you
> could split this branch in per bug/feature smaller branches (stack them
> if needed) and open (or comment if there is already a bug open for that)
> a bug for each one?

Sounds like a good work flow. I think I've already filed the various
bugs appropriately, although I can split things up further if desired:

https://bugzilla.gnome.org/show_bug.cgi?id=636258

https://bugzilla.gnome.org/show_bug.cgi?id=634489

You'll note that I haven't posted any patches or "ready for review"
comments in those bugs yet. It needs more testing and final work before
that. I was hoping to test this today and tomorrow. Sadly I've instead
been wrestling with the new style-context in gtk+3 and trying to just
get empathy to build :(

>> empathy uses libgcr for these lookups, which uses PKCS#11 to lookup the
>> various trust anchors and certificate exceptions in PKCS#11 modules. The
>> relevant PKCS#11 modules are provided by gnome-keyring.
> 
> We already depend on libgcr, so that doesn't introduce any new dep,
> right?

Yup, that's right. BTW, I've documented the new code:

http://people.collabora.co.uk/~stefw/gcr-docs/gcr-Trust-Storage-and-Lookups.html

>> gnome-keyring trust-store [4] branch is necessary to make all this work..
> 
> It would be good to have a gnome-keyring bug for that so all our Empathy
> bugs can depend on it.

Already done, and the bug dependencies are in place :)

https://bugzilla.gnome.org/show_bug.cgi?id=636257

Hopefully I'll be able to get a successful build of empathy, and get
back to working on this stuff :)

Cheers,

Stef