[Pkg-owncloud-commits] [owncloud-client] 119/175: Abort the request and reset the QNAM if user does not ACK a new cert.

[Sandro Knauß]

This is an automated email from the git hooks/post-receive script.

hefee-guest pushed a commit to branch master
in repository owncloud-client.

commit 75b38d1a2ffe57d0f1eb3ebb8c5f30b8b2a185e4
Author: Klaas Freitag <freitag at owncloud.com>
Date:   Tue Jun 2 12:21:49 2015 +0200

    Abort the request and reset the QNAM if user does not ACK a new cert.
    
    This is supposed to fix bug #3283
---
 src/libsync/account.cpp | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/libsync/account.cpp b/src/libsync/account.cpp
index 8723a8b..d3e0c76 100644
--- a/src/libsync/account.cpp
+++ b/src/libsync/account.cpp
@@ -503,6 +503,11 @@ void Account::slotHandleErrors(QNetworkReply *reply , QList<QSslError> errors)
         reply->ignoreSslErrors();
     } else {
         _treatSslErrorsAsFailure = true;
+        // if during normal operation, a new certificate was MITM'ed, and the user does not
+        // ACK it, the running request must be aborted and the QNAM must be reset, to not
+        // treat the new cert as granted. See bug #3283
+        reply->abort();
+        resetNetworkAccessManager();
         return;
     }
 }

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud-client.git