Revision 07584b3...

Go back to digest for 27th March 2011

Security in Other

Richard J. Moore committed changes in [qt-kde] /:

QSslCertificate: report fraudulent certificates as invalid

There are some fraudulent certificates in the wild that are not valid;
this patch introduces a blacklist of serial numbers of those
certificates.

Reviewed-by: Richard J. Moore
Reviewed-by: Markus Goetz
Task-number: QTBUG-18338
(cherry picked from commit 04e074e8d7c097295505e63565abdc7ca2b49f7b)

File Changes

Added 9 files
  • /auto/qsslcertificate/more-certificates
  •   tests/blacklisted1.pem
  •   tests/blacklisted2.pem
  •   tests/blacklisted3.pem
  •   tests/blacklisted4.pem
  •   tests/blacklisted5.pem
  •   tests/blacklisted6.pem
  •   tests/blacklisted7.pem
  •   tests/blacklisted8.pem
  •   tests/blacklisted9.pem
Modified 3 files
  •   src/network/ssl/qsslcertificate.cpp
  •   src/network/ssl/qsslcertificate_p.h
  •   tests/auto/qsslcertificate/tst_qsslcertificate.cpp
12 files changed in total