[webkit-gtk] SSL Handshake failed on some sites
Sergio Villar Senin
svillar at igalia.com
Wed Feb 27 00:35:56 PST 2013
En 26/02/13 20:37, Thomas Weißschuh escribiu:
> The problem here isn't webkitgtk but a miscommunication between
> libsoup/glib-networking/gnutls.
>
> In libsoup/soup-socket.c:soup_socket_handshake_sync() a connectinon attempt is
> made. Then there is a check whether a TLS or SSL error occurred (different
> things in this case). If it was a TLS error; higher up the callstack a retry is
> scheduled. This time using SSL instead of TLS (exactly to prevent TLS
> incompabilities)
> In this case however the error reported by g_tls_connection_handshake is a
> certificate parsing error, which is classified as SSL error, so no retry is
> performed.
> If one forces the certificate parsing error to be a TLS error, the retried
> connection will succeed (including parsing the certificate), so this
> certificate can't be completely broken.
>
> Are people on this list who want to handle this themselves or should I file
> this with those other projects?
Can you file a bug in bugzilla?
BR
More information about the webkit-gtk
mailing list