[haiku-bugs] Re: [Haiku] #6493: WebPositive should be able to load pages with unverified SSL certs

  • From: "stippi" <trac@xxxxxxxxxxxx>
  • Date: Mon, 14 Jan 2013 14:16:03 -0000

#6493: WebPositive should be able to load pages with unverified SSL certs
----------------------------------------+----------------------------
   Reporter:  archpaladin1              |      Owner:  stippi
       Type:  enhancement               |     Status:  new
   Priority:  high                      |  Milestone:  R1/beta1
  Component:  Applications/WebPositive  |    Version:  R1/Development
 Resolution:                            |   Keywords:
 Blocked By:                            |   Blocking:
Has a Patch:  1                         |   Platform:  All
----------------------------------------+----------------------------

Comment (by stippi):

 Thanks for the work! I see two problems with the patch. In the cURL
 backend, I think solution is really temporary. As a user, one would want
 to have a persistent white list of servers. It should work very much like
 how the persistent cookie jar works. I imagine a !HashSet of white listed
 servers to replace the single "ignore server" field, and the list needs to
 be stored when !WebPositive quits and restored when it launches.

 The second problem is with the code in Window: It is a layer breach,
 Window should know nothing about the cURL backend. The layering is like
 this: !WebCore <-> !WebKit <-> !WebPositive. Everything in !WebPositive
 needs to use the !WebKit API only, never any !WebCore stuff directly. You
 can look at how getting authentication credentials is handled, it should
 be similar. It's a bit more overhead, but it really can't work any other
 way.

-- 
Ticket URL: <http://dev.haiku-os.org/ticket/6493#comment:7>
Haiku <http://dev.haiku-os.org>
Haiku - the operating system.

Other related posts: