diff options
| author | Peter Hartmann <phartmann@blackberry.com> | 2013-12-10 09:21:43 +0100 |
|---|---|---|
| committer | The Qt Project <gerrit-noreply@qt-project.org> | 2013-12-12 10:43:59 +0100 |
| commit | 84bfbd4cb090f7f77ae3b04308726d2b8ddf4792 (patch) | |
| tree | 720b809a6ed8d17d1c1e5e7f1652c482232932c3 /src/network | |
| parent | 1c0a1ebba12c9c1fa02117b9a017c4ed3f7cd7c3 (diff) | |
SSL: blacklist ANSSI intermediate certificate
... because it was used to operate a man-in-the-middle proxy.
Task-number: QTBUG-35474
(backported from commit 7eecbb07184bc8b2c5e7645af2805ba0a2488082)
Change-Id: Ibf15faf0b89fa29a8ca9d9dfeeeab120dd644526
Reviewed-by: Richard J. Moore <rich@kde.org>
Diffstat (limited to 'src/network')
| -rw-r--r-- | src/network/ssl/qsslcertificate.cpp | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/network/ssl/qsslcertificate.cpp b/src/network/ssl/qsslcertificate.cpp index 186eafbd5b..cc5f3ebb76 100644 --- a/src/network/ssl/qsslcertificate.cpp +++ b/src/network/ssl/qsslcertificate.cpp @@ -830,6 +830,8 @@ static const char *certificate_blacklist[] = { "2087", "*.EGO.GOV.TR", // Turktrust mis-issued intermediate certificate "2148", "e-islem.kktcmerkezbankasi.org", // Turktrust mis-issued intermediate certificate + + "204199", "AC DG Tr\xC3\xA9sor SSL", // intermediate certificate linking back to ANSSI French National Security Agency 0 }; |