After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 511097 - Support self-signed certificates in neonhttpsrc
Support self-signed certificates in neonhttpsrc
Status: RESOLVED FIXED
Product: GStreamer
Classification: Platform
Component: gst-plugins-bad
0.10.x
Other All
: Normal enhancement
: 0.10.13
Assigned To: GStreamer Maintainers
GStreamer Maintainers
Depends on:
Blocks:
 
 
Reported: 2008-01-21 18:45 UTC by Mathias Hasselmann (IRC: tbf)
Modified: 2009-05-25 15:27 UTC
See Also:
GNOME target: ---
GNOME version: ---

Attachments
Support for self-signed certificates (5.02 KB, patch)
2008-01-21 18:49 UTC, Mathias Hasselmann (IRC: tbf) 		committed Details | Review

Description Mathias Hasselmann (IRC: tbf) 2008-01-21 18:45:07 UTC 
Currently GStreamer fails when accessing HTTPS servers with self-signed certificates, like those setup by Totem's Publish plugin for instance.

Attached is a proof-of-concept patch for supporting self-signed certificates, but I do not know how to fine-tune the behaviour, e.g. which trust problems are acceptable.
Comment 1 Mathias Hasselmann (IRC: tbf) 2008-01-21 18:49:36 UTC 
Created attachment 103357 [details] [review]
Support for self-signed certificates
Comment 2 David Schleef 2008-01-21 21:07:30 UTC 
I'm not a big fan of going down this route without having some sort of application /desktop mechanism and policy for verifying certificates.  I may just be ignorant of what is available, though.  Basically, we want to avoid just trusting any ol' self-signed certificate (duh).
Comment 3 Mathias Hasselmann (IRC: tbf) 2008-01-21 21:35:51 UTC 
Snake oil still is better than no HTTPS at all. So for now this just just made work. Learned that playbin clients can watch "notify::source", so its absolutely reasonable to set the property to FALSE by default.
Comment 4 Wim Taymans 2009-05-25 15:27:32 UTC 
I don't think it hurts to add this with a default of FALSE. 

commit 46b4d226ca6ed4efa7574ad7bae46af8c73fc7bd
Author: Mathias Hasselmann <mathias.hasselmann at gmx.de>
Date:   Mon May 25 17:24:32 2009 +0200

    neonhttp: add property to support SS cerificates
    
    Add a property to support self-signed certificates in neonhttpsrc. This property
    is FALSE by default.
    Fixes #511097