QSslCertificate: report fraudulent certificates as invalid
authorTimo Turunen <timo.p.turunen@nokia.com>
Mon, 28 Mar 2011 17:24:32 +0000 (20:24 +0300)
committerTimo Turunen <timo.p.turunen@nokia.com>
Mon, 28 Mar 2011 17:24:32 +0000 (20:24 +0300)
commit43a8e3115fc9d13c2da2f32c3d2aafcfe0c6e543
tree39472078da6a3d4cc8f831baea3bb27bd93d3fe8
parentc9511d642e7ab38ad2a47ba834580cfbda43ab65
QSslCertificate: report fraudulent certificates as invalid

There are some fraudulent certificates in the wild that are not valid;
this patch introduces a blacklist of serial numbers of those
certificates.

Reviewed-by: Richard J. Moore
Reviewed-by: Markus Goetz
Task-number: QTBUG-18338
(cherry picked from commit 04e074e8d7c097295505e63565abdc7ca2b49f7b)

Conflicts:

tests/auto/qsslcertificate/tst_qsslcertificate.cpp
12 files changed:
src/network/ssl/qsslcertificate.cpp
src/network/ssl/qsslcertificate_p.h
tests/auto/qsslcertificate/more-certificates/blacklisted1.pem [new file with mode: 0644]
tests/auto/qsslcertificate/more-certificates/blacklisted2.pem [new file with mode: 0644]
tests/auto/qsslcertificate/more-certificates/blacklisted3.pem [new file with mode: 0644]
tests/auto/qsslcertificate/more-certificates/blacklisted4.pem [new file with mode: 0644]
tests/auto/qsslcertificate/more-certificates/blacklisted5.pem [new file with mode: 0644]
tests/auto/qsslcertificate/more-certificates/blacklisted6.pem [new file with mode: 0644]
tests/auto/qsslcertificate/more-certificates/blacklisted7.pem [new file with mode: 0644]
tests/auto/qsslcertificate/more-certificates/blacklisted8.pem [new file with mode: 0644]
tests/auto/qsslcertificate/more-certificates/blacklisted9.pem [new file with mode: 0644]
tests/auto/qsslcertificate/tst_qsslcertificate.cpp