G_TLS_CERTIFICATE_GENERIC_ERROR/"Unacceptable TLS certificate" for https://account.live.com certificate
Attempting to visit https://account.live.com with applications that use glib-networking results in "Unacceptable TLS certificate"/G_TLS_CERTIFICATE_GENERIC_ERROR
. Visiting https://account.live.com with Firefox/curl -iv https://account.live.com
/openssl s_client -connect account.live.com:443
all work, so I suspect something is wrong with how this certificate is being verified in version 2.70.0 of glib-networking.
There's two easy ways to reproduce the issue on Fedora 35 (Fedora 34 does not have the error):
Reproducing error via epiphany/webkitgtk:
- On Fedora 35 (w/ glib-networking-2.70.0-1.fc35.x86_64), install the epiphany web browser
- Attempt to visit https://account.live.com using epiphany
Reproducing error via libsoup examples (get.c):
- On Fedora 35 (w/ glib-networking-2.70.0-1.fc35.x86_64), compile libsoup
- Run get.c example:
./get https://account.live.com
$ ./get https://account.live.com
Failed to send request: Unacceptable TLS certificate