[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-core-devel
Subject:    Re: Using system SSL certificates...
From:       Thiago Macieira <thiago () kde ! org>
Date:       2010-01-29 13:30:37
Message-ID: 201001291430.37617.thiago () kde ! org
[Download RAW message or body]


Em Sexta-feira 29 Janeiro 2010, ās 14:04:06, Pierre Schmitz escreveu:
> > I've already made a script to do that. Actually, a Qt program.
> >
> > I'll probably update Qt's certificate list with the Firefox ones for the
> > next  Qt version.
> >
> > So all KDE has to do is stop overriding Qt's default certificate bundle.
> 
> I would appreciate if KDE and Qt would use the system wide cert bundle 
> (optionally configurable at build time).

The only thing that's holding me back in updating the Qt certificates is to 
decide whether keeping expired certificates is a good thing.

There are 81 certificates in Qt's bundle. One of them is repeated, so 80 are 
unique.

However, from those 80, 8 have expired already.

Of the 72 non-expired, unique certificates in Qt, 48 are *not* in the Firefox 
certificate store. But when the remainder of the Firefox ones are added, the 
total increases to 120.

-- 
Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
  Senior Product Manager - Nokia, Qt Development Frameworks
      PGP/GPG: 0x6EF45358; fingerprint:
      E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358

["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]