gwibber-bugs team mailing list archive
-
gwibber-bugs team
-
Mailing list archive
-
Message #03826
[Bug 705363] Re: gwibber bypasses certificate checking when providing the login/password for OAuth
With the transition to using libaccounts-glib and libsignon-glib in 3.6,
the login is handled outside of gwibber and properly handles SSL.
** Changed in: gwibber
Status: New => Fix Released
** Changed in: gwibber (Ubuntu)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Gwibber
Bug Heros, which is subscribed to Gwibber.
https://bugs.launchpad.net/bugs/705363
Title:
gwibber bypasses certificate checking when providing the
login/password for OAuth
Status in Gwibber:
Fix Released
Status in “gwibber” package in Ubuntu:
Fix Released
Status in “gwibber” package in Debian:
Confirmed
Bug description:
Someone reported this in Debian: http://bugs.debian.org/cgi-
bin/bugreport.cgi?bug=608724
identi.ca had (mistakenly) installed an SSL certificate not recognized
by the installed CA, yet the user has been presented with the OAuth
login screen even if that https connection could not be authentified.
To manage notifications about this bug go to:
https://bugs.launchpad.net/gwibber/+bug/705363/+subscriptions
References