diff options
| author | Peter Hartmann <phartmann@rim.com> | 2013-01-04 10:06:14 (GMT) |
|---|---|---|
| committer | The Qt Project <gerrit-noreply@qt-project.org> | 2013-01-04 23:32:48 (GMT) |
| commit | 451462b1e0304e0cb6c2872e4f5688bc2e556dca (patch) | |
| tree | b4e35fe3685e9f9e47e552fef2b743780654c5a8 /src/network/ssl | |
| parent | 8990186b15923096054d42de03cbbab9453730f3 (diff) | |
| download | Qt-451462b1e0304e0cb6c2872e4f5688bc2e556dca.zip Qt-451462b1e0304e0cb6c2872e4f5688bc2e556dca.tar.gz Qt-451462b1e0304e0cb6c2872e4f5688bc2e556dca.tar.bz2 | |
SSL certificates: blacklist mis-issued Turktrust certificates
Those certificates have erroneously set the CA attribute to true,
meaning everybody in possesion of their keys can issue certificates on
their own.
backport of bf5e7fb2652669599a508e049b46ebd5cd3206e5 from qtbase
Task-number: QTBUG-28937
Change-Id: Iee57c6f983fee61c13c3b66ed874300ef8e80c23
Reviewed-by: Richard J. Moore <rich@kde.org>
Diffstat (limited to 'src/network/ssl')
| -rw-r--r-- | src/network/ssl/qsslcertificate.cpp | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/network/ssl/qsslcertificate.cpp b/src/network/ssl/qsslcertificate.cpp index 038187f..37799d1 100644 --- a/src/network/ssl/qsslcertificate.cpp +++ b/src/network/ssl/qsslcertificate.cpp @@ -825,6 +825,9 @@ static const char *certificate_blacklist[] = { "120001705", "Digisign Server ID (Enrich)", // (Malaysian) Digicert Sdn. Bhd. cross-signed by Verizon CyberTrust "1276011370", "Digisign Server ID - (Enrich)", // (Malaysian) Digicert Sdn. Bhd. cross-signed by Entrust + + "2087", "*.EGO.GOV.TR", // Turktrust mis-issued intermediate certificate + "2148", "e-islem.kktcmerkezbankasi.org", // Turktrust mis-issued intermediate certificate 0 }; |