Use 'bos.oscar.aol.com' as the common name for the initial BOS connection. cpw.darkrain42.oscar.ssl

Wed, 28 Jan 2009 03:40:55 +0000

author
Paul Aurich <darkrain42@pidgin.im>
date
Wed, 28 Jan 2009 03:40:55 +0000
branch
cpw.darkrain42.oscar.ssl
changeset 25520
f7e939fc0d6a
parent 25519
d15507b37c1a
child 25521
811e394a5b1b

Use 'bos.oscar.aol.com' as the common name for the initial BOS connection.

The redirect from the login server to first BOS server doesn't include the
magic TLV with a name to use for comparison; I missed this because I cached
all those certificates before I fixed the code for the other SNAC family
servers.

libpurple/protocols/oscar/oscar.c file | annotate | diff | comparison | revisions
--- a/libpurple/protocols/oscar/oscar.c	Tue Jan 27 10:00:32 2009 +0000
+++ b/libpurple/protocols/oscar/oscar.c	Wed Jan 28 03:40:55 2009 +0000
@@ -1691,9 +1691,13 @@
 
 	if (od->use_ssl)
 	{
-		newconn->gsc = purple_ssl_connect(account, host, port,
-				ssl_connection_established_cb, ssl_connection_error_cb,
-				newconn);
+		/*
+		 * This shouldn't be hardcoded except that the server isn't sending
+		 * us a name to use for comparing the certificate common name.
+		 */
+		newconn->ssl_cert_cn = g_strdup("bos.oscar.aol.com");
+		newconn->connect_data = purple_proxy_connect(NULL, account, host, port,
+				ssl_proxy_conn_established_cb, newconn);
 	}
 	else
 	{

mercurial