← Back to team overview

desktop-packages team mailing list archive

[Bug 705363] Re: gwibber bypasses certificate checking when providing the login/password for OAuth

 

** Changed in: gwibber (Debian)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gwibber in Ubuntu.
https://bugs.launchpad.net/bugs/705363

Title:
  gwibber bypasses certificate checking when providing the
  login/password for OAuth

Status in Gwibber:
  Fix Released
Status in gwibber package in Ubuntu:
  Fix Released
Status in gwibber package in Debian:
  Fix Released

Bug description:
  Someone reported this in Debian: http://bugs.debian.org/cgi-
  bin/bugreport.cgi?bug=608724

  identi.ca had (mistakenly) installed an SSL certificate not recognized
  by the installed CA, yet the user has been presented with the OAuth
  login screen even if that https connection could not be authentified.

To manage notifications about this bug go to:
https://bugs.launchpad.net/gwibber/+bug/705363/+subscriptions