[Webkit-unassigned] [Bug 266196] Certificate error for playstation.com signed by DigiCert but not other DigiCert signed sites

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=266196

--- Comment #2 from Michael Catanzaro <mcatanzaro at redhat.com> ---
(In reply to Alina Marquardt from comment #0)
> Since I couldn't find out where WebkitGTK takes its certificates from and
> it's a breaking bug in Tangram for me I'm reporting this here. For now I'm
> assuming the certificates are built into the engine somehow or the error is
> coming from somewhere within the engine, since my installation is less than
> two months old, very recently updated and other certificates signed by
> DigiCert or other authorities pose no problem.

 * Certificate verification is performed by GnuTLS (hopefully) or OpenSSL (alternatively), via glib-networking, via libsoup
 * glib-networking will use your GnuTLS default trust store, which will hopefully be p11-kit if your distro is smart; generally non-Debian distros get this right. (I don't know what happens with OpenSSL, since OpenSSL does not have native support for p11-kit, but it will probably be whatever OpenSSL does by default.)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20231211/9f5ff959/attachment-0001.htm>