psyko0815 / quite-rss

Automatically exported from code.google.com/p/quite-rss
Other
0 stars 0 forks source link

SSL certificates are not validated #689

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
Steps to reproduce:
Add a new feed with an https://... URL or open an https://... URL in the 
integrated browser, whereas the server delivers an invalid SSL certificate 
(either not signed, signed by unknown CA, expired or with wrong hostname).

Expected behavior:
An error message should be shown and the website should not be downloaded 
(especially no credentials should be send).

What happens instead:
Website gets downloaded without any indication of the problem.

Original issue reported on code.google.com by anmelde...@arcor.de on 12 Dec 2014 at 4:07

GoogleCodeExporter commented 8 years ago
Need an example of links to websites.

Original comment by egor.shi...@gmail.com on 13 Dec 2014 at 6:07

GoogleCodeExporter commented 8 years ago
The connection to this website should fail because the hostname doesn't match 
the certificate: https://rssowl.org/

I think the problem is here: 
https://code.google.com/p/quite-rss/source/browse/src/network/networkmanager.cpp
#49

Original comment by anmelde...@arcor.de on 13 Dec 2014 at 6:45

GoogleCodeExporter commented 8 years ago

Original comment by egor.shi...@gmail.com on 13 Dec 2014 at 9:20

GoogleCodeExporter commented 8 years ago
This issue was closed by revision 63ffa7d89362.

Original comment by egor.shi...@gmail.com on 24 Dec 2014 at 6:08