Hi Wojtek,

Thank you for your response. Could you request a CVE for this ?


On Fri, Sep 27, 2013 at 2:21 AM, Wojtek Kaniewski <wojte...@toxygen.net>wrote:

> Dnia 2013-09-19, czw o godzinie 19:40 +0530, Radhesh Krishnan K pisze:
>
> > I couldn't follow up with this for long time. Is this bug fixed ?
> >
> libgadu now rejects connection when certificate verification fails and
> gg_login_params.tls is set to GG_SSL_REQUIRED. When .tls is set to
> GG_SSL_ENABLED it just issues a warning, since then it allows even
> plain-text connections. CRL is supported only when the library handles
> it automatically (GnuTLS >= 3.0), which is documented in README. New
> release is a matter of days.
>
> Regards,
> Wojtek
>
>
> _______________________________________________
> libgadu-devel mailing list
> libgadu-devel@lists.ziew.org
> http://lists.ziew.org/mailman/listinfo/libgadu-devel
>



-- 




Regards,
Radhesh Krishnan K.
_______________________________________________
libgadu-devel mailing list
libgadu-devel@lists.ziew.org
http://lists.ziew.org/mailman/listinfo/libgadu-devel

Reply via email to