Skip to content

Unable to use TLS connection with glib-networking 2.64.3 #251

@SilverRainZ

Description

@SilverRainZ
  • ArchLinux

  • Srain 1.1-git@0.1408.a6b5596

  • GLib 1.2.10-14

  • GTK3 1:3.24.20-1

glib-networking 2.64.2-1

Anything goes well except this warning:

(srain:1916358): GLib-Net-WARNING **: 13:16:38.927: GTlsClientConnection certificate verification will fail because its server-identity property is NULL. Fix your application!

glib-networking 2.64.3-1

[WARN on_accept_certificate] Certificate error: bad-identity
[ ERR on_connect_fail] Connect failed: 无法接受的 TLS 证书

conclusion

According to glib-networking's doc:

If the G_TLS_CERTIFICATE_BAD_IDENTITY flag is set in “validation-flags”, this object will be used to determine the expected identify of the remote end of the connection; if “server-identity” is not set, or does not match the identity presented by the server, then the G_TLS_CERTIFICATE_BAD_IDENTITY validation will fail.

But it is not correctly implemented before 2.64, it just print a "Fix your application" but not fail the connection, In 2.64.3 it is fixed, but breaks srain :'(

ref: https://gitlab.gnome.org/GNOME/glib-networking/-/issues/135

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions