[Webkit-unassigned] [Bug 114945] New: Please set the libsoup property "ssl-use-system-ca-file" to True by default

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=114945

           Summary: Please set the libsoup property
                    "ssl-use-system-ca-file" to True by default
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Unspecified
        OS/Version: Unspecified
            Status: UNCONFIRMED
          Severity: Normal
          Priority: P2
         Component: WebKit Gtk
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: michael.vogt at gmail.com


I recently stumbled over https://bugzilla.gnome.org/show_bug.cgi?id=666280 in a project of mine again.

In a nutshell, the issue is that libsoup will not do SSL certification checking by default unless its
explicitly enabled. This is documented in libsoup and my bugreport about this (from 2011) got rejected
on the grounds that its documented behaviour.

In the libsoup bugreport Gustavo Noronha mentions that you may consider setting this in webkkitgtk by
default. I would like to ask for this again as I almost forgot to set it in a new project of mine that
uses webkitgtk and talks to a SSL server.

The following (pygi) code is needed, I'm happy to do a proper patch for the C webkitgtk is there is a
chance that my patch gets accepted. The pygi code:
"""
session = WebKit.get_default_session()
session.set_property("ssl-use-system-ca-file", True)
"""

Thanks for considering,
 Michael

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.