News for hackers. Stuff that matters.

A comment on Validating SSL Certificates in Non-Browser Software (2012) [pdf].

Re:Validating SSL Certificates in Non-Browser Software (2012... by billpg on Friday August 23, 2019 @04:45AM (#20775613) 

    bool ValidateCertificate(cert)
    {
        return true;
    }
[ Parent | on HN ]
Re:Validating SSL Certificates in Non-Browser Software (2012... by tialaramex on Friday August 23, 2019 @06:28AM (#20776093)
https://github.com/haiku/haiku/blob/master/src/kits/network/...
[ Parent | on HN ]
Re:Validating SSL Certificates in Non-Browser Software (2012... by waddlesplash on Friday August 23, 2019 @05:38PM (#20782882)
This is the default implementation; our WebKit port (the main consumer of this API) has a subclass of this which shows a "this certificate is invalid, do you want to continue?" message and actually returns false.

But it's been multiple years since that comment was added, probably more than time to fix that. Thanks for the (inadvertent) reminder :)

EDIT: done. https://git.haiku-os.org/haiku/commit/?id=a830ec9a1c5f0e359b...

[ Parent | on HN ]