[Webkit-unassigned] [Bug 163166] [GStreamer] Certificate database missing when accessing HTTPS via WebKitWebSourceGStreamer

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=163166

--- Comment #7 from Michael Catanzaro <mcatanzaro at igalia.com> ---
(In reply to comment #3)
> Fortunately that should be fixed in trunk now by r206772

So how is it that SoupSession is used by GStreamer? Are GStreamer's loads going to go through our SoupNetworkSession goo or not? If they do, as I guess, then surely our API like allow_specific_https_certificate_for_host already works, and we have no further problem. I suppose that's the case if it's using WebKit's SoupSession. (But if not, then we have a security problem; it's not safe to turn off ssl-strict on GStreamer if it's not using WebKit's custom TLS error checking.)

I'm disappointed that SoupNetworkSession exists at all in the web process.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20161010/36bdd146/attachment.html>