https://bugs.kde.org/show_bug.cgi?id=523169
Bug ID: 523169
Summary: Kasts Flatpak SSL handshake failures
Classification: Applications
Product: kasts
Version First 26.04.3
Reported In:
Platform: Ubuntu
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
DESCRIPTION
When running Kasts as the Flatpak package (org.kde.kasts stable) on Ubuntu
26.04 LTS, almost every HTTPS podcast feed fails to update with an SSL
handshake error. The app logs show repeated "Handshake SSL failed: The issuer
certificate of a locally looked up certificate could not be found" messages for
many different feed domains (Il Sole 24 Ore, Spreaker, Megaphone, Acast, etc.).
There are also several QML warnings (anchors, created objects not placed in
scene, binding loops) in the log, but the functional breakage is the SSL
validation failures preventing feed updates and discovery.
STEPS TO REPRODUCE
Install Kasts from Flatpak (org.kde.kasts stable) on Ubuntu 26.04 LTS.
Launch Kasts with: flatpak run org.kde.kasts (or start normally and wait
for automatic feed update).
Observe feed updates / discovery failing; check terminal output or system
journal for repeated SSL handshake errors.
OBSERVED RESULT
Many feed updates fail with messages of the form:
Error happened: Error::FeedUpdate "<feed-URL>" "" 6 "Handshake SSL failed:
The issuer certificate of a locally looked up certificate could not be found"
Podcast discovery / catalog queries (PodcastIndex etc.) also fail with the
same SSL handshake errors.
Terminal/journal also shows QML warnings: "Cannot anchor to an item that
isn't a parent or sibling", "Created graphical object was not placed in the
graphics scene", repeated "Binding loop detected for property y". These UI
warnings appear repeatedly but the main functional issue is the SSL handshake
failures.
EXPECTED RESULT
Podcast feeds (HTTPS) should be fetched and updated normally; SSL/TLS
handshakes should succeed for valid public podcast providers.
Discovery should return results from PodcastIndex / catalog endpoints.
UI warnings should be absent or not interfere with normal functionality.
SOFTWARE/OS VERSIONS
Operating System: Ubuntu 26.04 LTS on HP ProDesk 600 G3 SFF (user reported
environment).
Kasts install type: Flatpak, org.kde.kasts, stable branch (runtime 26.04.3 as
shown by flatpak).
KDE Plasma Version: (not applicable / running under GNOME Shell on this
machine) — app launched under GNOME session on Ubuntu 26.04.
KDE Frameworks Version: n/a (Flatpak runtime provides frameworks; please see
runtime in flatpak info)
Qt Version: Qt version used inside Flatpak (see flatpak info --show-runtime
org.kde.kasts or flatpak run --command=sh org.kde.kasts -c 'qmake -v')
ADDITIONAL INFORMATION
Relevant log excerpts (captured launching with flatpak run org.kde.kasts
and from journalctl):
Database version 15
qrc:/qt/qml/org/kde/kasts/qml/Main.qml:170:5: QML Loader: Cannot anchor
to an item that isn't a parent or sibling.
qrc:/qt/qml/org/kde/kasts/qml/DiscoverPage.qml:17:1: QML DiscoverPage:
Created graphical object was not placed in the graphics scene.
qrc:/qt/qml/org/kde/kasts/qml/QueuePage.qml:17:1: QML QueuePage:
Created graphical object was not placed in the graphics scene.
Repeated lines: Error happened: Error::FeedUpdate "<URL>" "" 6
"Handshake SSL failed: The issuer certificate of a locally looked up
certificate could not be found"
The SSL error repeats across many unrelated feed providers, which strongly
suggests the issue is missing/invalid CA certificates inside the Flatpak
runtime environment or a problem in how the Flatpak runtime validates
certificate chains, rather than an outage or misconfiguration on the feed
servers.
The app was run as Flatpak system installation; data/config may be under
~/.var/app/org.kde.kasts/ (check ~/.var/app/org.kde.kasts/data and
~/.var/app/org.kde.kasts/config for attachments).
System journal entries show the same error messages repeated and QML
binding-loop warnings; CPU/memory consumption lines shown in the journal
indicate the Flatpak scope consumed significant memory while trying updates
(journal excerpt included in paste).
For debugging: if maintainers need a backtrace for a crash, I can reproduce
and attach a crash backtrace with debug symbols; currently the failure is
network/SSL validation errors, not a crash.
Please advise whether you want the full paste.txt attached (it contains the
complete journalctl extract) or additional commands (flatpak info, flatpak run
with QT_LOGGING_RULES, or output of flatpak run --env=QT_DEBUG_PLUGINS=1
org.kde.kasts).
Suggested quick checks (for maintainers / packagers):
Verify that the Flatpak runtime used by org.kde.kasts contains up-to-date
CA certificates (ca-certificates package in runtime).
Verify Flatpak sandbox has access to host certificate store if intended, or
that the runtime bundles a complete CA set.
Attempt to reproduce on a non-Flatpak build (native package) to see if the
issue is Flatpak-specific.
--
You are receiving this mail because:
You are watching all bug changes.
