| Summary: | Telepathy-gabble hardcodes CA certificates path | ||
|---|---|---|---|
| Product: | Telepathy | Reporter: | Brian Pepple <bpepple> |
| Component: | gabble | Assignee: | Nicolas Dufresne <nicolas> |
| Status: | RESOLVED FIXED | QA Contact: | Telepathy bugs list <telepathy-bugs> |
| Severity: | normal | ||
| Priority: | medium | CC: | pterjan |
| Version: | 0.9 | Keywords: | patch |
| Hardware: | Other | ||
| OS: | All | ||
| Whiteboard: | review+ with trivial changes | ||
| i915 platform: | i915 features: | ||
| Attachments: |
Make CA certificates path configurable
Make CA certificates path configurable (using --with) |
||
*** Bug 29715 has been marked as a duplicate of this bug. *** Created attachment 38147 [details] [review] Make CA certificates path configurable This adds a variable option to the configure script to change the CA certificates path. ./configure CA_CERTIFICATES_PATH=/my/distro/ca/cert/path.crt What about using curl configure code to detect it on most distributions ? (In reply to comment #3) > What about using curl configure code to detect it on most distributions ? Which would require track and maintaining a list of what distros do. Do we really want to do so ? (In reply to comment #4) > (In reply to comment #3) > > What about using curl configure code to detect it on most distributions ? > Which would require track and maintaining a list of what distros do. Do we > really want to do so ? I think any user of a non-debian based system would say yes. Created attachment 38153 [details] [review] Make CA certificates path configurable (using --with) Can now configure CA certificates bunder of dir using ./configure --with-ca-certificates=PATH Review of attachment 38153 [details] [review]: "allows configuring", "creates a new constant in config.h named", and "by passing --with-ca-certificates=/etc/ssl/certs/ca-certificates.crt to the configure script"; but the actual code changes look good. Please correct the commit message at the same time you add Reviewed-By: me :-) Fixed upstream Opps, forgot the status. *** Bug 31474 has been marked as a duplicate of this bug. *** |
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.
Description of problem: In Fedora 12, I could use strict-SSL in Empathy for Google Chat (strict meaning encryption required, don't ignore errors). In Fedora 13 this now just says "Certificate untrusted". The cert path is hardcoded in tp-gabble: src/connection.c: 1895 static gboolean 1896 _gabble_connection_connect (TpBaseConnection *base, 1897 GError **error) 1898 { ... 1914 /* system certs */ 1915 wocky_connector_add_ca (priv->connector, 1916 "/etc/ssl/certs/ca-certificates.crt"); but doesn't match Fedora convention (/etc/pki/tls/certs/ca-bundle.crt).