Issues

• Design issue: In my design, the Certificate struct has an ptr to a GnuTLS certificate structure to hold its internal data. This has the consequence that the SSL connection system and X.509 handling must both be provided by GnuTLS; if, say, SILC provides the X.509 handling, and GnuTLS the SSL connections, everything grinds to a gruesome segfaulty halt.

Should I address this? The only workaround I can think of is to keep a pointer to the PEM-formatted certificate in the Certificate struct instead, but that will require any consumers of the Certificate to have PEM encoding/decoding and constantly decode it from PEM for every use. (June 19)

• How to ensure that VerificationRequests? get properly trashed in unusual conditions (such as canceling an SSL connection)? (June 26)

• Jabber.org presents a cert with a CN of "*.jabber.org". How to check this? (26 June)
  • Update: This is *almost* valid. "foo.jabber.org" is valid with this certificate, but not "jabber.org" itself! (8 July)
  • The certificate has jabber.org as an alternative name in an extension. GnuTLS should be dealing with this automatically. We'll see what NSS does (17 Aug)

• #1947

Resolved Issues

• It looks like PKCS12 (the certificate import/export format) is supported by both libNSS and GnuTLS.
• Jabber "connect with fd" problem solved by porting a change from soc.2007.xmpp (29 May, June 26)
• Why doesn't a "not accepted" on a certificate cause the connection to fail? I suspect this is caused by auto-reconnect, so it might be necessary to disable the account involved! (26 June)
  • This could be related to Jabber not handling the BAD_CERTIFICATE error code?
  • I think this is resolved...at least, I can't reproduce it any more.. (11 July)

TODO

• General paranoia
• Look at how the SILC prpl does its key management, especially the organization of the API used to check certs and interact with the user to verify them.
• Add some way of passing useful error messages back up out of the SSL interface (23 May)
• Figure out libNSS everything. (25 May)
  • ​http://lxr.mozilla.org/mozilla/ident?i=CERT_GetCertTimes
• Why am I getting single-byte serial numbers from servers? (25 May)
• Stall the timeouts on the TCP connection while waiting for user input on SSL? (29 May)
• Worry about ensuring that plugins don't kill in-use ciphers/certschemes when unloaded? (29 May)
• Adium uses neither GnuTLS nor NSS. Look into extending the OpenSSL plugin (26 June)
• Guarantee that purple_certificate_verify will not fire its callback until the next return to mainloop. sadrul says to do this with g_timeout_add (June 28)
• Disapprove 42fb4d80947518f87ddcaf43bf2675d8496698de (7 July)
• Refactoring. The certificate interface feels too complicated. (11 July)
• HIG compliance (17 July)
• How should a PidginCertificateManager? signal that it *cannot* be displayed? (19 July)
• Degrade gracefully when the CertMgr subsystem lacks important bits. (3 Aug)
• Add a ./configure option to specify where to look for root certificates (13 Aug)
• Instead of loading every certificate out of the CAs into memory, keep a DN-filename reference (13 Aug)
• Crasher: Click "delete" twice, then hit "yes" to both dialogs. (13 Aug)
• Certificates require some kind of metadata system. For example, it would be useful to alert the user when a cached certificate has expired, but, should he dismiss the request and opt not to be prompted again, to respect his wishes and not bother him. (14 Aug)
  • Provide a way to specify "do not use this certificate, even if it is properly signed" option through the certmgr GUI. The backend (by cert hash, the full cert, etc.) isn't all that important. GUI might be a checkbox in the certlist, or an extra tab. (17 Aug)

Tasks done

• Figure out how to get key fingerprints out of GnuTLS (25 May, 25 May))
• GnuTLS and NSS should probably be configured to use g_malloc and g_free for paranoia's sake (1 June, 26 June)
• e408398aae606a1aafb857413db4fa9736e374ae should be disapproved. It is hacky and stupid (26 June, 7 July)
• Why won't gtkcertmgr.h get properly processed by "make docs"? (13 July, 13 July)
  • sadrul is awesome. Typos are not.
• Work out how to use Glib functions for time checking on certificates. (29 May, 13 July)
  • POSIX for the win.
• activation/expiration should be made one function in the Scheme, as that's how NSS does it. (13 July, 3 Aug)
• Reference-count Certificate instances instead of making full copies? (8 July, 13 Aug)
  • Implemented in f9e47ecff65cbcb1e87b8fedd271ec5b02123fcf for GnuTLS (13 July)
  • NSS does reference counting already (13 Aug)
• Change the things that purple_certificate_verify does such that it is easy for one verification request to make another. This will involve making a "copy" operator for certificates. (7 July, 13 Aug)
• Fix purple_ssl_init in sslconn.c; it doesn't do anything (23 May, 13 Aug)
  • Side effects of lazy init were biting me. It now does something. (13 Aug)