https://bugzilla.novell.com/show_bug.cgi?id=825903 https://bugzilla.novell.com/show_bug.cgi?id=825903#c2 --- Comment #2 from Dominique Leuenberger 2013-07-11 20:17:49 UTC --- making librest build without the ca-certificates is one thing... making it work seems to be another one :( So far I have: librest built without ca-certifcates glib-networking built without ca-certificates A typical entry-point where the problem is easy to be observed is gnome-control-center, online accounts, try to sign in to a google account. hence, up to reading gnutls code / patches I'm afraid. (the most obvious entry point in glib-networking is static GTlsDatabase* g_tls_backend_gnutls_real_create_database (GTlsBackendGnutls *self, GError **error) { const gchar *anchor_file = NULL; #ifdef GTLS_SYSTEM_CA_FILE anchor_file = GTLS_SYSTEM_CA_FILE; #endif return g_tls_file_database_new (anchor_file, error); } ) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=825903 https://bugzilla.novell.com/show_bug.cgi?id=825903#c4 --- Comment #4 from Dominique Leuenberger 2013-07-11 21:24:26 UTC --- btw: g-o-a allows me to sign in with google with this patched glib-networking / librest without ca-certificates defined... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=825903 https://bugzilla.novell.com/show_bug.cgi?id=825903#c6 --- Comment #6 from Bernhard Wiedemann 2013-07-16 23:00:07 CEST --- This is an autogenerated message for OBS integration: This bug (825903) was mentioned in https://build.opensuse.org/request/show/183475 Factory / librest -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=825903 https://bugzilla.novell.com/show_bug.cgi?id=825903#c8 Dominique Leuenberger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |lnussel@suse.com --- Comment #8 from Dominique Leuenberger 2013-08-13 20:16:06 UTC --- Hoping that Ludwig is back: Can you please verify the few packages fixed here? I'd not want to 'disable' cert checking... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=825903 https://bugzilla.novell.com/show_bug.cgi?id=825903#c10 --- Comment #10 from Dominique Leuenberger 2013-08-14 07:50:33 UTC --- well, "it works" from a user perspective, as I can add an account in gnome-online-accounts (which I could no longer do after the bundle was removed and before patching). But, of course, 'works' does not mean 'validates certificates correctly'. tools using librest are: * gnome-online-accounts * libzapojit (skydrive integration) * shotwell (for the various online posting mechanism) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=825903 https://bugzilla.novell.com/show_bug.cgi?id=825903#c12 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@suse.com --- Comment #12 from Ludwig Nussel 2013-08-27 14:40:43 CEST --- the glib-networking patch causes trouble. If the database is NULL libsoup for example turns off certificate validation. glib-networking is really a hard case as it reimplements the complete chain validation to offer more features than gnutls has. In the long term this might go into gnutls but atm I see noone doing it. So for 13.1 I see no other choice than to re-introduce the bundle atm :-( -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=825903 https://bugzilla.novell.com/show_bug.cgi?id=825903#c14 Dominique Leuenberger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WONTFIX --- Comment #14 from Dominique Leuenberger 2013-09-05 18:52:22 UTC --- glib-networking and librest networking have been reverted for Factory... We're back to use the bundle file... might be 'less nice', but proven to work. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.