Control: tags -1 patch
On Thu, 29 Jun 2017 18:22:37 +0200 Felix Geyer <[email protected]> wrote:
> Package: libgwenhywfar60
> Version: 4.17.0-3
> Severity: important
>
> Hi,
>
> after upgrading to libgwenhywfar 4.17.0-3 and libaqbanking 5.7.6beta-2
> it doesn't trust any certificates anymore.
Upstream introduced a --enable-system-certs switch that's disabled by default.
With the attached patch cert verification works as expected again.
I can't think of a reason why this would be disabled by default. Upstream
should really just call
gnutls_certificate_set_x509_system_trust() (instead of guessing CA bundle
paths) if the user
didn't somehow specify an own CA bundle.
Felix
diff -Nru libgwenhywfar-4.17.0/debian/rules libgwenhywfar-4.17.0/debian/rules
--- libgwenhywfar-4.17.0/debian/rules
+++ libgwenhywfar-4.17.0/debian/rules
@@ -19,7 +19,8 @@
--with-qt5-qmake=$(QT5_BIN_DIR)/qmake \
--with-qt5-moc=$(QT5_BIN_DIR)/moc \
--with-qt5-uic=$(QT5_BIN_DIR)/uic \
- --disable-network-checks
+ --disable-network-checks \
+ --enable-system-certs
override_dh_auto_build:
dh_auto_build
