After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 675377 - no SSL certificate checking
no SSL certificate checking
Status: RESOLVED DUPLICATE of bug 671535
Product: libgdata
Classification: Platform
Component: General
git master
Other Linux
: Normal normal
: ---
Assigned To: libgdata-maint
libgdata-maint
Depends on:
Blocks:
 
 
Reported: 2012-05-03 15:34 UTC by Marcus Meissner
Modified: 2012-05-03 16:37 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Marcus Meissner 2012-05-03 15:34:08 UTC 
There is apparently no SSL certificate checking in libgdata / libsoup callers.

This basically means that someone could man-in-the-middle attack between the libgdata user and google services, even when using https.
Comment 1 Philip Withnall 2012-05-03 16:37:52 UTC 
This was fixed in versions 0.11.1 and 0.10.2, and was announced fairly widely.

*** This bug has been marked as a duplicate of bug 671535 ***