[Github-comments] [geany/geany-plugins] geniuspaste plugin missing TLS certificate verification (#1078)

[nomadbyte]

It's quite trivial to change GeniusPaste to call `soup_session_new_with_options()` instead of the current `soup_session_async_new_with_options()`, the resulting object is still the `SoupSession`, and it seems that the plugin is in fact doing a **synchronous** send. We can implement the queue'ed send, if needed, of course.

However, the implication of the proper TLS validation now is the need to have the system TLS certs available. On Linux there's usually a central cert-db, but not sure there's such on Windows. This plugin does not have direct ways to configure the cert-db location.

What's the recommended way to handle TLS validation on Windows?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/geany/geany-plugins/issues/1078#issuecomment-861162376
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.geany.org/pipermail/github-comments/attachments/20210614/653441d5/attachment.htm>