[webkit-changes] [WebKit/WebKit] c02853: [GTK][WPE] Allow specific TLS certificate for a ho...

[Carlos Garcia Campos]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: c02853156a9142fb5ed284ef33ab78f1466063d7
      https://github.com/WebKit/WebKit/commit/c02853156a9142fb5ed284ef33ab78f1466063d7
  Author: Carlos Garcia Campos <cgarcia at igalia.com>
  Date:   2023-01-23 (Mon, 23 Jan 2023)

  Changed paths:
    M Source/WebCore/platform/network/soup/SoupNetworkSession.cpp
    M Source/WebCore/platform/network/soup/SoupNetworkSession.h
    M Source/WebKit/NetworkProcess/NetworkProcess.h
    M Source/WebKit/NetworkProcess/NetworkProcess.messages.in
    M Source/WebKit/NetworkProcess/cocoa/NetworkProcessCocoa.mm
    M Source/WebKit/NetworkProcess/curl/NetworkProcessCurl.cpp
    M Source/WebKit/NetworkProcess/soup/NetworkProcessSoup.cpp
    M Source/WebKit/NetworkProcess/soup/NetworkSessionSoup.cpp
    M Source/WebKit/NetworkProcess/soup/NetworkSessionSoup.h
    M Source/WebKit/UIProcess/WebsiteData/WebsiteDataStore.cpp

  Log Message:
  -----------
  [GTK][WPE] Allow specific TLS certificate for a host should not be global to the network process
https://bugs.webkit.org/show_bug.cgi?id=250894

Reviewed by Adrian Perez de Castro.

This is not a problem for current API, because it's web context API and
we always have one network process per context with a single session.
For the new API, we'll have a global network process with multiple sessions
that shouldn't share the allowed certificates.

* Source/WebCore/platform/network/soup/SoupNetworkSession.cpp:
(WebCore::SoupNetworkSession::checkTLSErrors):
(WebCore::SoupNetworkSession::allowSpecificHTTPSCertificateForHost):
(WebCore::allowedCertificates): Deleted.
* Source/WebCore/platform/network/soup/SoupNetworkSession.h:
* Source/WebKit/NetworkProcess/NetworkProcess.h:
* Source/WebKit/NetworkProcess/NetworkProcess.messages.in:
* Source/WebKit/NetworkProcess/cocoa/NetworkProcessCocoa.mm:
(WebKit::NetworkProcess::allowSpecificHTTPSCertificateForHost):
* Source/WebKit/NetworkProcess/curl/NetworkProcessCurl.cpp:
(WebKit::NetworkProcess::allowSpecificHTTPSCertificateForHost):
* Source/WebKit/NetworkProcess/soup/NetworkProcessSoup.cpp:
(WebKit::NetworkProcess::allowSpecificHTTPSCertificateForHost):
* Source/WebKit/NetworkProcess/soup/NetworkSessionSoup.cpp:
(WebKit::NetworkSessionSoup::allowSpecificHTTPSCertificateForHost):
* Source/WebKit/NetworkProcess/soup/NetworkSessionSoup.h:
* Source/WebKit/UIProcess/WebsiteData/WebsiteDataStore.cpp:
(WebKit::WebsiteDataStore::allowSpecificHTTPSCertificateForHost):

Canonical link: https://commits.webkit.org/259202@main