From owner-freebsd-gecko@FreeBSD.ORG  Fri Jan  2 06:49:48 2015
Return-Path: <owner-freebsd-gecko@FreeBSD.ORG>
Delivered-To: gecko@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 6288951F
 for <gecko@freebsd.org>; Fri,  2 Jan 2015 06:49:48 +0000 (UTC)
Received: from mail-pa0-x22b.google.com (mail-pa0-x22b.google.com
 [IPv6:2607:f8b0:400e:c03::22b])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 2E2C366E68
 for <gecko@freebsd.org>; Fri,  2 Jan 2015 06:49:48 +0000 (UTC)
Received: by mail-pa0-f43.google.com with SMTP id kx10so23694166pab.2
 for <gecko@freebsd.org>; Thu, 01 Jan 2015 22:49:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=sender:message-id:date:from:reply-to:user-agent:mime-version:to
 :subject:content-type:content-transfer-encoding;
 bh=l2j3uJ8CjRqd3eVdpluAIGaWmtsJKsX40As1qgeoDhE=;
 b=TqaeTJ+9zMZyzz8GRD5HK5t8j0zt1De4JIsk9FdkyQVuPMCl2R5JAtETdX6Jj5NyAS
 gVGeEbQZUsVtMQoWGu6xHfjTzphFLXB4FLoBMFioDGl3IbMU1Rp3Z23j+cy9xP/fEHJL
 Bh3+x9B4bDsIt/xRV6JWXdDs0y+uD6dj7Zlsu8wOWH33tgqs8S9Yy7CvQQeeY6OlE8n3
 Gk4Y5tbR98rImiCmGkfJ1WnA7Dk56lqjjW37833ea5TDugTl74q3oiKhgWFhRGG22Eok
 Qh/dwrVtpmf7esLu+0nfxCa/oepNwG9Zbvz+jLe5A/tAnSRx9wu4enK6tI9X3ofSE0gX
 mhBg==
X-Received: by 10.70.91.176 with SMTP id cf16mr119310834pdb.100.1420181387687; 
 Thu, 01 Jan 2015 22:49:47 -0800 (PST)
Received: from [192.168.1.109] (ppp59-167-128-11.static.internode.on.net.
 [59.167.128.11])
 by mx.google.com with ESMTPSA id nr10sm11091215pbc.47.2015.01.01.22.49.46
 for <gecko@freebsd.org>
 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Thu, 01 Jan 2015 22:49:47 -0800 (PST)
Sender: Kubilay Kocak <koobs.freebsd@gmail.com>
Message-ID: <54A63F78.7040709@FreeBSD.org>
Date: Fri, 02 Jan 2015 17:49:28 +1100
From: Kubilay Kocak <koobs@FreeBSD.org>
Reply-To: koobs@FreeBSD.org
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:34.0) Gecko/20100101 Thunderbird/34.0
MIME-Version: 1.0
To: gecko@FreeBSD.org
Subject: Fix broken SSL certificate verification for ports OpenSSL consumers
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-gecko@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Gecko Rendering Engine issues <freebsd-gecko.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-gecko>,
 <mailto:freebsd-gecko-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-gecko/>
List-Post: <mailto:freebsd-gecko@freebsd.org>
List-Help: <mailto:freebsd-gecko-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-gecko>,
 <mailto:freebsd-gecko-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 02 Jan 2015 06:49:48 -0000

Hi Gecko!

Can I have approval to commit the following bug report please:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=196431

Several FreeBSD Python organisations, users and consumers have reported
substantially broken environments by this and the change is probably
also very long overdue for other software that consumes SSL certificates
in the same manner.

Thank you in advance!

koobs