mirrors/nextcloud-desktop
1
0
Fork 0
mirror of https://github.com/nextcloud/desktop.git synced 2024-12-18 11:51:51 +03:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #3301 from owncloud/fix_3283

Browse source 
Abort the request and reset the QNAM if user does not ACK a new cert.
This commit is contained in:
Klaas Freitag 2015-06-03 10:22:13 +02:00
commit 53154bcd1e
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/libsync/account.cpp
View file

@ -503,6 +503,11 @@ void Account::slotHandleErrors(QNetworkReply *reply , QList<QSslError> errors)
reply->ignoreSslErrors(); reply->ignoreSslErrors();
} else { } else {
_treatSslErrorsAsFailure = true; _treatSslErrorsAsFailure = true;
// if during normal operation, a new certificate was MITM'ed, and the user does not
// ACK it, the running request must be aborted and the QNAM must be reset, to not
// treat the new cert as granted. See bug #3283
reply->abort();
resetNetworkAccessManager();
return; return;
} }
} }