[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kdelibs-bugs
Subject:    [kdelibs] [Bug 339023] New: KDE distrusts system certificate
From:       Dennis Schridde <devurandom () gmx ! net>
Date:       2014-09-12 4:35:42
Message-ID: bug-339023-90985 () http ! bugs ! kde ! org/
[Download RAW message or body]

https://bugs.kde.org/show_bug.cgi?id=339023

            Bug ID: 339023
           Summary: KDE distrusts system certificate
           Product: kdelibs
           Version: 4.13.3
          Platform: Ubuntu Packages
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: NOR
         Component: general
          Assignee: kdelibs-bugs@kde.org
          Reporter: devurandom@gmx.net

A server's SSL certificate is signed by StartSSL. KDE (more accurate
Akonadi/DAV) complains about it: "The server failed the authenticity check (…).
The certificate is not signed by any trusted certificate authority".

When I click "Details", it tells me the server's certificate is trusted
("Trusted: Yes"). When I select the root certificate of the chain (CN=StartCom
Certification Authority), I see that it is actually *not* trusted ("Trusted:
NO, there were errors: The certificate is not signed by any trusted certificate
authority").

It says the SHA1 digest is 3e2bf7f2031b96f38ce6c4d8a85d3e2d58476a0f. This
certificate is among the system certificates:
$ certtool -i < /etc/ssl/certs/ca-certificates.crt 2>/dev/null | grep
3e2bf7f2031b96f38ce6c4d8a85d3e2d58476a0f 
                3e2bf7f2031b96f38ce6c4d8a85d3e2d58476a0f

I see two problems here:
1) KDE says in the error details that it trusts the server certificate, when it
should actually say that it was not issued by a trusted authority.
2) KDE distrusts the certificate authority for no apparent reason.

Reproducible: Always

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Kdelibs-bugs mailing list
Kdelibs-bugs@kde.org
https://mail.kde.org/mailman/listinfo/kdelibs-bugs

[prev in list] [next in list] [prev in thread] [next in thread]