--------------Boundary-00=_OMS9M6EVIQSDAR2SM2RY Content-Type: text/plain; charset="iso-8859-15" Content-Transfer-Encoding: 8bit There is a bug in 2.2.2 that makes SSL certificates still not properly verify on sites with frames. This is not a security hole, but quite the opposite. It warns of a security problem when there isn't one. Here is a possible patch for this. I haven't tested this specfic patch but I believe Dawit has, and I tested a similar one in HEAD which worked. -- George Staikos --------------Boundary-00=_OMS9M6EVIQSDAR2SM2RY Content-Type: text/x-diff; charset="iso-8859-15"; name="ksslpeerinfo.patch" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="ksslpeerinfo.patch" SW5kZXg6IGtzc2xwZWVyaW5mby5oCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KUkNTIGZpbGU6IC9ob21lL2tkZS9rZGVs aWJzL2tzc2wva3NzbHBlZXJpbmZvLmgsdgpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMTIuMi4xCnJl dHJpZXZpbmcgcmV2aXNpb24gMS4xMi4yLjIKZGlmZiAtdSAtcjEuMTIuMi4xIC1yMS4xMi4yLjIK LS0tIGtzc2xwZWVyaW5mby5oCTIwMDEvMTEvMDcgMDU6NDc6MzcJMS4xMi4yLjEKKysrIGtzc2xw ZWVyaW5mby5oCTIwMDEvMTEvMjMgMTg6NDI6MzYJMS4xMi4yLjIKQEAgLTI0LDcgKzI0LDcgQEAK IGNsYXNzIEtTU0w7CiAKICNpbmNsdWRlIDxxZ2xvYmFsLmg+Ci0jaW5jbHVkZSA8cXN0cmluZy5o PgorI2luY2x1ZGUgPHFzdHJpbmdsaXN0Lmg+CiAjaW5jbHVkZSA8a3NzbGNlcnRpZmljYXRlLmg+ CiAKIGNsYXNzIEtTU0xQZWVySW5mb1ByaXZhdGU7CkBAIC0zOCwxNCArMzgsMTUgQEAKICAgS1NT TENlcnRpZmljYXRlJiBnZXRQZWVyQ2VydGlmaWNhdGUoKTsKICAgYm9vbCBjZXJ0TWF0Y2hlc0Fk ZHJlc3MoKTsKICAgUVN0cmluZyBnZXRQZWVyQWRkcmVzcygpOwotICAKKwogICB2b2lkIHNldFBy b3h5aW5nKGJvb2wgYWN0aXZlLCBRU3RyaW5nIHJlYWxIb3N0ID0gUVN0cmluZzo6bnVsbCk7Ci0g CisKIHByb3RlY3RlZDoKICAgS1NTTFBlZXJJbmZvKCk7CiAKICAgS1NTTENlcnRpZmljYXRlIG1f Y2VydDsKICAgdm9pZCBzZXRQZWVyQWRkcmVzcyhLSW5ldFNvY2tldEFkZHJlc3MgJngpOworICB2 b2lkIGV4dHJhY3REb21haW5zKGNvbnN0IFFTdHJpbmcgJmZxZG4sIFFTdHJpbmdMaXN0ICZkb21h aW5zKTsKIAogcHJpdmF0ZToKICAgS1NTTFBlZXJJbmZvUHJpdmF0ZSAqZDsKSW5kZXg6IGtzc2xw ZWVyaW5mby5jYwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09ClJDUyBmaWxlOiAvaG9tZS9rZGUva2RlbGlicy9rc3NsL2tz c2xwZWVyaW5mby5jYyx2CnJldHJpZXZpbmcgcmV2aXNpb24gMS4xMi4yLjEwCnJldHJpZXZpbmcg cmV2aXNpb24gMS4xMi4yLjExCmRpZmYgLXUgLXIxLjEyLjIuMTAgLXIxLjEyLjIuMTEKLS0tIGtz c2xwZWVyaW5mby5jYwkyMDAxLzExLzA3IDA1OjQ3OjM3CTEuMTIuMi4xMAorKysga3NzbHBlZXJp bmZvLmNjCTIwMDEvMTEvMjMgMTg6NDI6MzYJMS4xMi4yLjExCkBAIC0yMyw3ICsyMyw2IEBACiAj ZW5kaWYKIAogI2luY2x1ZGUgImtzc2xwZWVyaW5mby5oIgotI2luY2x1ZGUgPHFzdHJpbmcuaD4K ICNpbmNsdWRlIDxrZGVidWcuaD4KIAogI2luY2x1ZGUgPGtzb2NrYWRkci5oPgpAQCAtNzQsMjUg KzczLDU0IEBACiAgIFFTdHJpbmcgY24gPSBjZXJ0aW5mby5nZXRWYWx1ZSgiQ04iKTsKIAogICBp ZiAoZC0+cHJveHlpbmcpIHsKLQlpZiAoY24uc3RhcnRzV2l0aCgiKiIpKSB7Ci0JCVFSZWdFeHAg Y25yZShjbi5sb3dlcigpLCBmYWxzZSwgdHJ1ZSk7Ci0JCWlmIChjbnJlLm1hdGNoKGQtPnByb3h5 SG9zdC5sb3dlcigpKSA+PSAwKSByZXR1cm4gdHJ1ZTsKLQl9IGVsc2UgewotCQlpZiAoY24ubG93 ZXIoKSA9PSBkLT5wcm94eUhvc3QubG93ZXIoKSkgcmV0dXJuIHRydWU7Ci0JfQotCXJldHVybiBm YWxzZTsKKyAgICBRU3RyaW5nTGlzdCBkb21haW5zOworCisgICAga2REZWJ1Zyg3MDI5KSA8PCAi TWF0Y2hpbmcgQ049IiA8PCBjbiA8PCAiIHRvICIgPDwgZC0+cHJveHlIb3N0IDw8IGVuZGw7CisK KyAgICBleHRyYWN0RG9tYWlucyhkLT5wcm94eUhvc3QsIGRvbWFpbnMpOworICAgIFFTdHJpbmdM aXN0OjpJdGVyYXRvciBpdCA9IGRvbWFpbnMuYmVnaW4oKTsKKyAgICBmb3IgKDsgaXQgIT0gZG9t YWlucy5lbmQoKTsgaXQrKykKKyAgICB7CisgICAgICBpbnQgbWF0Y2ggPSBjbi5maW5kUmV2KCpp dCwgLTEsIGZhbHNlKTsKKyAgICAgIGtkRGVidWcoNzAyOSkgPDwgIk1hdGNoPSAiIDw8IG1hdGNo IDw8ICIsIENOLmxlbmd0aD0gIiA8PCBjbi5sZW5ndGgoKQorICAgICAgICAgICAgICAgICAgICA8 PCAiLCBob3N0Lmxlbmd0aD0gIiA8PCAoKml0KS5sZW5ndGgoKSA8PCBlbmRsOworCisgICAgICBp ZiAobWF0Y2ggPiAtMSAmJiAoKG1hdGNoICsgKCppdCkubGVuZ3RoKCkpID09IGNuLmxlbmd0aCgp KSkKKyAgICAgIHsKKyAgICAgICAga2REZWJ1Zyg3MDI5KSA8PCAiRm91bmQgYSBtYXRjaCA9PT4g IiA8PCAoKml0KSA8PCBlbmRsOworICAgICAgICByZXR1cm4gdHJ1ZTsKKyAgICAgIH0KKyAgICB9 CisgICAgcmV0dXJuIGZhbHNlOwogICB9CiAKIAogICBpZiAoY24uc3RhcnRzV2l0aCgiKiIpKSB7 ICAgLy8gc3R1cGlkIHdpbGRjYXJkIGNuCi0gICAgIFFSZWdFeHAgY25yZShjbi5sb3dlcigpLCBm YWxzZSwgdHJ1ZSk7CiAgICAgIFFTdHJpbmcgaG9zdCwgcG9ydDsKKyAgICAgUVN0cmluZ0xpc3Qg ZG9tYWluczsKIAotICAgICBpZiAoS0V4dGVuZGVkU29ja2V0OjpyZXNvbHZlKGQtPmhvc3QsIGhv c3QsIHBvcnQsIE5JX05BTUVSRVFEKSAhPSAwKSAKKyAgICAgaWYgKEtFeHRlbmRlZFNvY2tldDo6 cmVzb2x2ZShkLT5ob3N0LCBob3N0LCBwb3J0LCBOSV9OQU1FUkVRRCkgIT0gMCkKICAgICAgICAg aG9zdCA9IGQtPmhvc3QtPm5vZGVOYW1lKCk7CiAKICAgICAga2REZWJ1Zyg3MDI5KSA8PCAiTWF0 Y2hpbmcgQ049IiA8PCBjbiA8PCAiIHRvICIgPDwgaG9zdCA8PCBlbmRsOwotICAgICBpZiAoY25y ZS5tYXRjaChob3N0Lmxvd2VyKCkpID49IDApIHJldHVybiB0cnVlOworCisgICAgIGV4dHJhY3RE b21haW5zKCBob3N0LCBkb21haW5zICk7CisgICAgIFFTdHJpbmdMaXN0OjpJdGVyYXRvciBpdCA9 IGRvbWFpbnMuYmVnaW4oKTsKKworICAgICBmb3IgKDsgaXQgIT0gZG9tYWlucy5lbmQoKTsgaXQr KykKKyAgICAgeworICAgICAgICBpbnQgbWF0Y2ggPSBjbi5maW5kUmV2KCppdCwgLTEsIGZhbHNl KTsKKyAgICAgICAga2REZWJ1Zyg3MDI5KSA8PCAiTWF0Y2g9ICIgPDwgbWF0Y2ggPDwgIiwgQ04u bGVuZ3RoPSAiIDw8IGNuLmxlbmd0aCgpCisgICAgICAgICAgICAgICAgICAgICAgPDwgIiwgaG9z dC5sZW5ndGg9ICIgPDwgKCppdCkubGVuZ3RoKCkgPDwgZW5kbDsKKworICAgICAgICBpZiAobWF0 Y2ggPiAtMSAmJiAoKG1hdGNoICsgKCppdCkubGVuZ3RoKCkpID09IGNuLmxlbmd0aCgpKSkKKyAg ICAgICAgeworICAgICAgICAgIGtkRGVidWcoNzAyOSkgPDwgIkZvdW5kIGEgbWF0Y2ggPT0+ICIg PDwgKCppdCkgPDwgZW5kbDsKKyAgICAgICAgICByZXR1cm4gdHJ1ZTsKKyAgICAgICAgIH0KKyAg ICAgfQorCisgICAgIHJldHVybiBmYWxzZTsKICAgfSBlbHNlIHsKICAgICAgaW50IGVyciA9IDA7 CiAgICAgIFFMaXN0PEtBZGRyZXNzSW5mbz4gY25zID0gS0V4dGVuZGVkU29ja2V0Ojpsb29rdXAo Y24ubGF0aW4xKCksIDAsIDAsICZlcnIpOwpAQCAtMTAyLDE3ICsxMzAsNTUgQEAKICAgICAgfQog ICAgICBjbnMuc2V0QXV0b0RlbGV0ZSh0cnVlKTsKIAotLy8gICAgIGtkRGVidWcoNzAyOSkgPDwg IlRoZSBvcmlnaW5hbCBvbmVzIHdlcmU6ICIgPDwgZC0+aG9zdC0+bm9kZU5hbWUoKQotLy8gICAg ICAgICAgICAgICAgICAgPDwgIiBhbmQ6ICIgPDwgY2VydGluZm8uZ2V0VmFsdWUoIkNOIikubGF0 aW4xKCkKLS8vICAgICAgICAgICAgICAgICAgIDw8IGVuZGw7CisgICAgIGtkRGVidWcoNzAyOSkg PDwgIlRoZSBvcmlnaW5hbCBvbmVzIHdlcmU6ICIgPDwgZC0+aG9zdC0+bm9kZU5hbWUoKQorICAg ICAgICAgICAgICAgICAgIDw8ICIgYW5kOiAiIDw8IGNlcnRpbmZvLmdldFZhbHVlKCJDTiIpLmxh dGluMSgpCisgICAgICAgICAgICAgICAgICAgPDwgZW5kbDsKIAogICAgICBmb3IgKEtBZGRyZXNz SW5mbyAqeCA9IGNucy5maXJzdCgpOyB4OyB4ID0gY25zLm5leHQoKSkgewogICAgICAgICBpZiAo KCp4KS5hZGRyZXNzKCktPmlzQ29yZUVxdWFsKGQtPmhvc3QpKSB7CiAgICAgICAgICAgIHJldHVy biB0cnVlOwogICAgICAgICB9CiAgICAgIH0KKyAgICAga2REZWJ1Zyg3MDI5KSA8PCAiVGVzdGlu ZyBmYWlsZWQhIiA8PCBlbmRsOwogICB9CiAKICNlbmRpZgogICByZXR1cm4gZmFsc2U7Cit9CisK K3ZvaWQgS1NTTFBlZXJJbmZvOjpleHRyYWN0RG9tYWlucyhjb25zdCBRU3RyaW5nICZmcWRuLCBR U3RyaW5nTGlzdCAmZG9tYWlucykKK3sKKyAgICBkb21haW5zLmNsZWFyKCk7CisKKyAgICAvLyBJ ZiBmcWRuIGlzIGFuIElQIGFkZHJlc3MsIHRoZW4gb25seSB1c2UKKyAgICAvLyB0aGUgZW50aXJl IElQIGFkZHJlc3MgdG8gZmluZCBhIG1hdGNoISAoREEpCisgICAgaWYgKGZxZG5bMF0gPj0gJzAn ICYmIGZxZG5bMF0gPD0gJzknKSB7CisgICAgICAgZG9tYWlucy5hcHBlbmQoZnFkbik7CisgICAg ICAgcmV0dXJuOworICAgIH0KKworICAgIFFTdHJpbmdMaXN0IHBhcnRMaXN0ID0gUVN0cmluZ0xp c3Q6OnNwbGl0KCcuJywgZnFkbiwgZmFsc2UpOworCisgICAgaWYgKHBhcnRMaXN0LmNvdW50KCkp CisgICAgICAgIHBhcnRMaXN0LnJlbW92ZShwYXJ0TGlzdC5iZWdpbigpKTsgLy8gUmVtb3ZlIGhv c3RuYW1lCisKKyAgICB3aGlsZShwYXJ0TGlzdC5jb3VudCgpKSB7CisgICAgICAgaWYgKHBhcnRM aXN0LmNvdW50KCkgPT0gMSkKKyAgICAgICAgIGJyZWFrOyAvLyBXZSBvbmx5IGhhdmUgYSBUTEQg bGVmdC4KKworICAgICAgIGlmIChwYXJ0TGlzdC5jb3VudCgpID09IDIpIHsKKyAgICAgICAgICAv LyBJZiB0aGlzIGlzIGEgVExELCB3ZSBzaG91bGQgc3RvcC4gKGUuZy4gY28udWspCisgICAgICAg ICAgLy8gV2UgYXNzdW1lIHRoaXMgaXMgYSBUTEQgaWYgaXQgZW5kcyB3aXRoIC54eC55eSBvciAu eC55eQorICAgICAgICAgIGlmIChwYXJ0TGlzdFswXS5sZW5ndGgoKSA8PSAyICYmIHBhcnRMaXN0 WzFdLmxlbmd0aCgpID09IDIpCisgICAgICAgICAgICAgYnJlYWs7IC8vIFRoaXMgaXMgYSBUTEQu CisgICAgICAgfQorCisgICAgICAgUVN0cmluZyBkb21haW4gPSBwYXJ0TGlzdC5qb2luKCIuIik7 CisgICAgICAgZG9tYWlucy5hcHBlbmQoZG9tYWluKTsKKyAgICAgICBwYXJ0TGlzdC5yZW1vdmUo cGFydExpc3QuYmVnaW4oKSk7CisgICAgfQorCisgICAgLy8gQWRkIHRoZSBlbnRpcmUgRlFETiBh dCB0aGUgZW5kIG9mIHRoZQorICAgIC8vIGxpc3QgZm9yIGZxZG4gPT0gQ04gY2hlY2tzCisgICAg ZG9tYWlucy5hcHBlbmQoZnFkbik7CiB9Cg== --------------Boundary-00=_OMS9M6EVIQSDAR2SM2RY-- >> Visit http://mail.kde.org/mailman/listinfo/kde-devel#unsub to unsubscribe <<