Commit 6799f2c5 authored by Philip Withnall's avatar Philip Withnall
Browse files

core: Validate SSL certificates for all connections

This prevents MitM attacks which use spoofed SSL certificates.

Note that this bumps our libsoup requirement to 2.37.91.

Closes: https://bugzilla.gnome.org/show_bug.cgi?id=671535
parent cfc23bfe
......@@ -33,7 +33,7 @@ AC_PATH_PROG([GLIB_MKENUMS],[glib-mkenums])
# Requirements
GLIB_REQS=2.30.0
GIO_REQS=2.17.3
SOUP_REQS=2.26.1
SOUP_REQS=2.37.91
OAUTH_REQS=0.9.4
GTK_REQS=2.91.2
......
......@@ -2134,7 +2134,7 @@ _gdata_service_get_log_level (void)
SoupSession *
_gdata_service_build_session (void)
{
SoupSession *session = soup_session_sync_new ();
SoupSession *session = soup_session_sync_new_with_options (SOUP_SESSION_SSL_USE_SYSTEM_CA_FILE, TRUE, NULL);
#ifdef HAVE_GNOME
soup_session_add_feature_by_type (session, SOUP_TYPE_GNOME_FEATURES_2_26);
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment