QSslCertificate: blacklist fraudulent *.google.com
authorPeter Hartmann <peter.hartmann@nokia.com>
Tue, 30 Aug 2011 09:33:01 +0000 (11:33 +0200)
committerQt by Nokia <qt-info@nokia.com>
Tue, 30 Aug 2011 16:48:35 +0000 (18:48 +0200)
commit68b322270c4881d3d2b5ecc9f28b6b3471ccded4
tree3a5acdd0041dc7dfab9e48433d7d5f4a8402452f
parent22ea360fb952a1043515fbfd4706f057627e6366
QSslCertificate: blacklist fraudulent *.google.com

blacklist the leaf certificate for now. There might well be more fake
certificates in the wild, for that either the Diginotar.nl root cert
needs to be disabled on the system or OCSP would need to be enabled
(not supported by Qt yet).

Reviewed-by: Richard J. Moore <rich@kde.org>
(cherry picked from commit 70f6a1b91b242174682c30be976c2aa36c450cc7)

Change-Id: I7cd3fdc4c6e85202914764f983a60d301e54aa35
Reviewed-on: http://codereview.qt.nokia.com/3893
Reviewed-by: Peter Hartmann <peter.hartmann@nokia.com>
src/network/ssl/qsslcertificate.cpp
tests/auto/qsslcertificate/more-certificates/blacklisted-google.com-diginotar.pem [new file with mode: 0644]