View Issue Details

IDProjectCategoryView StatusLast Update
0007558Talerqtartpublic2024-07-29 12:22
ReporterFlorian Dold Assigned ToFlorian Dold  
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status assignedResolutionopen 
Target Versionpost-1.0 
Summary0007558: bundle TLS CA certs and re-enable TLS peer+host verification for libcurl HTTP client implementation
DescriptionWe currently disable peer+host verification, because some platforms (iOS!) don't expose trusted CA certs via the file system
TagsNo tags attached.

Activities

Christian Grothoff

2024-07-26 00:46

manager   ~0022852

Doesn't the use of native networking now take care of this?

Florian Dold

2024-07-29 12:22

manager   ~0022864

Yes.

It's only relevant now for the HTTP client implementations using the vendored libcurl.

All of our supported platforms use native networking, so this is definitely post-1.0.

Issue History

Date Modified Username Field Change
2023-01-10 11:45 Florian Dold New Issue
2023-01-10 11:45 Florian Dold Status new => assigned
2023-01-10 11:45 Florian Dold Assigned To => Florian Dold
2023-01-13 17:09 Christian Grothoff Severity minor => feature
2023-01-13 17:09 Christian Grothoff Target Version => 1.0
2024-07-26 00:46 Christian Grothoff Note Added: 0022852
2024-07-29 12:22 Florian Dold Note Added: 0022864
2024-07-29 12:22 Florian Dold Target Version 1.0 => post-1.0
2024-07-29 12:22 Florian Dold Summary bundle TLS CA certs and re-enable TLS peer+host verification => bundle TLS CA certs and re-enable TLS peer+host verification for libcurl HTTP client implementation