← Back to team overview

gwibber-bugs team mailing list archive

[Bug 705363] Re: gwibber bypasses certificate checking when providing the login/password for OAuth

 

With the transition to using libaccounts-glib and libsignon-glib in 3.6,
the login is handled outside of gwibber and properly handles SSL.

** Changed in: gwibber
       Status: New => Fix Released

** Changed in: gwibber (Ubuntu)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Gwibber
Bug Heros, which is subscribed to Gwibber.
https://bugs.launchpad.net/bugs/705363

Title:
  gwibber bypasses certificate checking when providing the
  login/password for OAuth

Status in Gwibber:
  Fix Released
Status in “gwibber” package in Ubuntu:
  Fix Released
Status in “gwibber” package in Debian:
  Confirmed

Bug description:
  Someone reported this in Debian: http://bugs.debian.org/cgi-
  bin/bugreport.cgi?bug=608724

  identi.ca had (mistakenly) installed an SSL certificate not recognized
  by the installed CA, yet the user has been presented with the OAuth
  login screen even if that https connection could not be authentified.

To manage notifications about this bug go to:
https://bugs.launchpad.net/gwibber/+bug/705363/+subscriptions


References