Fixes: https://bugzilla.gnome.org/691142

We are using g_clear_pointer.

For providers like Exchange which use libsoup to talk to a HTTPS
server it is not enough to warn the user about an invalid certificate.
We should make sure that we abort the connection before any
credentials have been sent.

Fixes: CVE-2013-1799

Free the CheckData in an idle handler because soup_session_abort
invokes http_client_check_response_cb. Trying to disconnect the
GCancellable from a 'cancelled' signal handler will result in a
deadlock.

Fixes: https://bugzilla.gnome.org/689642

Free the AutodiscoverData in an idle handler because soup_session_abort
invokes ews_client_autodiscover_response_cb. Trying to disconnect the
GCancellable from a 'cancelled' signal handler will result in a
deadlock.

Fixes: https://bugzilla.gnome.org/689642

Fixes: https://bugzilla.gnome.org/689642

Since more than one message is queued, we cancel the rest if any one
of them is successful. This short-circuiting is different from cases
where all messages are cancelled because of a soup_session_abort
triggered by a GCancellable.

Fixes: https://bugzilla.gnome.org/689642

Fixes: https://bugzilla.gnome.org/689642

None of the branded providers (eg., Google, Facebook and Windows Live)
should ever have an invalid certificate. So set "ssl-strict" on the
SoupSession object being used by GoaWebView.

Providers like ownCloud and Exchange might have to deal with
certificates that are not up to the mark. eg., self-signed
certificates. For those, show a warning when the account is being
created, and only proceed if the user decides to ignore it. In any
case, save the status of the certificate that was used to create the
account. So an account created with a valid certificate will never
work with an invalid one, and one created with an invalid certificate
will not throw any further warnings.

Fixes: CVE-2013-0240

Signed-off-by: Gheyret Kenji <gheyret@gmail.com>

Signed-off-by: Gheyret Kenji <gheyret@gmail.com>

Signed-off-by: Gheyret Kenji <gheyret@gmail.com>

Signed-off-by: Gheyret Kenji <gheyret@gmail.com>