https://bugs.freedesktop.org/show_bug.cgi?id=72277

--- Comment #24 from Julien Nabet <[email protected]> ---
Cédric: yes I had reproduced this on pc Debian x86-64

I had found this:
SessionFactory::createSession contains the parameter noSslCheck which calls
here 
WSSession::WSSession which calls BaseSession with the same parameter.
m_noSSLCheck takes the value of this parameter
Then, since noSSLCheck is false, we don't enter the if.
    616     if ( m_noSSLCheck )
    617     {
    618 #if LIBCURL_VERSION_VALUE >= 0x070801
    619         curl_easy_setopt(m_curlHandle, CURLOPT_SSL_VERIFYHOST, 0);
    620 #endif
    621 #if LIBCURL_VERSION_VALUE >= 0x070402
    622         curl_easy_setopt(m_curlHandle, CURLOPT_SSL_VERIFYPEER, 0);
    623 #endif
    624     }

Now taking again a look again, m_noSSLCheck may be assigned by:
1)
 BaseSession::setNoSSLCertificateCheck

2)
    682             if ( !certificates.empty() )
    683             {
    684                 libcmis::CertValidationHandlerPtr validationHandler =
    685                    
libcmis::SessionFactory::getCertificateValidationHandler( );
    686                 bool ignoreCert = validationHandler &&
validationHandler->validateCertificate( certificates );
    687                 if ( ignoreCert )
    688                 {
    689                     m_noSSLCheck = true;

I'll try to find some time to take a look more precisely to 2)

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to