[sylpheed:31885] Re: SSL certificate verify failed

[Ricardo Nabinger Sanchez]

On Wed, 31 Oct 2007 21:55:11 -0700
John Jason Jordan <johnxj at comcast.net> wrote:

> Any further suggestions?

If you really want to disable it altogether (as a temporary solution),
the following patch does it.  But please note that Sylpheed *won't* check
any certificates thereafter!!  Don't forget to back it out as soon as
Hiro implements certificate caching (still, use this patch at your own
risk).


Index: libsylph/ssl.c
===================================================================
--- libsylph/ssl.c      (revision 1921)
+++ libsylph/ssl.c      (working copy)
@@ -276,8 +276,9 @@
                if (verify_ui_func) {
                        gint res;
 
-                       res = verify_ui_func(sockinfo, sockinfo->hostname,
-                                            server_cert, verify_result);
+                       res = 1;
+//                     res = verify_ui_func(sockinfo, sockinfo->hostname,
+//                                          server_cert, verify_result);
                        /* 0: accept 1: temporarily accept -1: reject */
                        if (res < 0) {
                                debug_print("SSL certificate of %s rejected\n",


-- 
Ricardo Nabinger Sanchez                   rnsanchez at wait4.org
Powered by FreeBSD

  "Left to themselves, things tend to go from bad to worse."