RE: Konqueror & SSL
Sylvain, Thanks so much! Installing libssl09 fixed the problem! Jon -Original Message- From: Sylvain Joyeux [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 22, 2003 7:59 AM To: debian-kde@lists.debian.org Subject: Re: Konqueror & SSL install both, relaunch KDE and try. I had exactly the same problem a week ago and it Worked For Me (tm) -- Sylvain Joyeux -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Konqueror & SSL
install both, relaunch KDE and try. I had exactly the same problem a week ago and it Worked For Me (tm) -- Sylvain Joyeux
RE: Konqueror & SSL
I just checked, and I have libssl0.9.7 installed. It appears to be the correct ssl library for Konqueror, but alas, still not https connections :-( Jon -Original Message- From: Sylvain Joyeux [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 22, 2003 1:38 AM To: debian-kde@lists.debian.org Subject: Re: Konqueror & SSL There are two versions of libssl available (libssl09 and libssl0.9.7) and only one is usable by kde. (but I don't remember which one, sorry) -- Sylvain Joyeux -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Konqueror & SSL
There are two versions of libssl available (libssl09 and libssl0.9.7) and only one is usable by kde. (but I don't remember which one, sorry) -- Sylvain Joyeux
Konqueror & SSL
Is there some kind of "trick" to get Konqueror 3.1.1 (on Sid) to work with SSL? I have checked the Crypto settings, and both SSL2 and SSL3 are checked and enabled. However, every time I try to go to a https site, I get: "An error occurred while loading https://xxx.xxx.xxx Could not connect to host xxx.xxx.xxx" I have tried several https site with the same results. Sincerely, Jon D. Irish BAE SYSTEMS Analytical Solutions (Lower Tier Project Office)
Bug#157255: Konqueror SSL vunerability
Package: kdelibs3-crypto Version: 4:2.2.2-6 Severity: critical Tags: security upstream http://www.kde.org/info/security/advisory-20020818-1.txt KDE Security Advisory: Konqueror SSL vulnerability Original Release Date: 2002-08-18 URL: http://www.kde.org/info/security/advisory-20020818-1.txt 0. References http://online.securityfocus.com/archive/1/286290/2002-07-31/2002-08-06/0 http://online.securityfocus.com/archive/1/287050/2002-08-07/2002-08-13/2 1. Systems affected: All versions of KDE up to and including KDE 3.0.2 2. Overview: KDE's SSL implementation fails to check the basic constraints on certificates and as a result may accept certificates as valid that were signed by an issuer who was not authorized to do so. 3. Impact: Users of Konqueror and other SSL enabled KDE software may fall victim to a malicious man-in-the-middle attack without noticing. In such case the user will be under the impression that there is a secure connection with a trusted site while in fact a different site has been connected to. 4. Solution: Upgrade kdelibs to KDE 3.0.3. A patch for KDE 2.2.2 is available as well for users that are unable to upgrade to KDE 3. 5. Patch: A patch for KDE 2.2.2 is available from ftp://ftp.kde.org/pub/kde/security_patches : 0e0da738b276567e9ee36aa824e86124 post-2.2.2-kdelibs-kssl.diff -- System Information: Debian Release: testing/unstable Architecture: i386 Kernel: Linux dell 2.4.18-bf2.4 #1 Fri Jun 7 06:12:37 UTC 2002 i686 Locale: LANG=C, LC_CTYPE=C Versions of packages kdelibs3-crypto depends on: pn kdelibs3 Not found. ii libc62.2.5-14GNU C Library: Shared libraries an ii libssl0.9.6 0.9.6g-2SSL shared libraries ii libstdc++2.10-glibc2.2 1:2.95.4-11 The GNU stdc++ library ii zlib1g 1:1.1.4-3 compression library - runtime -- no debconf information
Re: Konqueror/SSL
I am having a similar problem gettin konqueror to work with ssl. I have installed kdelibs3-crypt, kdebase-crypto and libssl from unstable. When i try to install konqueror i get the warning that i need to install kdebase-crypto in order for ssl to work. but it is already installed! When i try to open the settings menu in konqueror, i get the following error "error loading module 'settings/personalization/crypto.desktop' the diagnostic is: /usr/lib/kde2/libkcm_crypto.so: undefined symbol: modifyByCN_20KSLLCertificateCache..." any ideas on how to fix this problem..? Reid Mumford[EMAIL PROTECTED] www.pha.jhu.edu/~reid On Fri, 26 Oct 2001, Bud Rogers wrote: > On Thursday 25 October 2001 18:24 pm, Bud Rogers wrote: > > > ii kdelibs3-crypt 2.2.1-4KDE core libraries (Crypto Modules) > > ii kdebase-crypto 2.1.1.0-3 KDE core applications (Crypto modules) > > ii libssl0.9.60.9.6b-2 SSL shared libraries > > To the person who questioned the version mismatch, that was it. I > reinstalled kdelibs3-crypto and kdebase-crypto from unstable and it works > now. Thanks. > > -- > Bud Rogers <[EMAIL PROTECTED]> > They have awakened a sleeping giant > and filled him with a terrible resolve. > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > >
Re: Konqueror/SSL
On Thursday 25 October 2001 18:24 pm, Bud Rogers wrote: > ii kdelibs3-crypt 2.2.1-4KDE core libraries (Crypto Modules) > ii kdebase-crypto 2.1.1.0-3 KDE core applications (Crypto modules) > ii libssl0.9.60.9.6b-2 SSL shared libraries To the person who questioned the version mismatch, that was it. I reinstalled kdelibs3-crypto and kdebase-crypto from unstable and it works now. Thanks. -- Bud Rogers <[EMAIL PROTECTED]> They have awakened a sleeping giant and filled him with a terrible resolve.
Re: Konqueror/SSL
Bud Rogers wrote: > ii kdelibs3-crypt 2.2.1-4KDE core libraries (Crypto Modules) > ii kdebase-crypto 2.1.1.0-3 KDE core applications (Crypto > modules) I don't think that mixing different versions og KDE packages is good idea. No wonder it doesn't work. regards, Hasso Tepper
Re: Konqueror/SSL
>> > > I have made the experience that it said in testing >> > > that there is no installation candidate . In this case >> > > - just download libssl0.9.6 , kdelibs3-crypto and >> > > kdebase-crypto from the debian package site and >> > > install it in the same order . Should work then . >> > >> > I have all of those installed, but I can't connect to any https site with >> > Konqueror. I have ssl enabled in Settings->Crypto. Is there something >> > else that needs to be set? >> >> sorry. I misread. >> >> I'm in unstable, and i do not have this problem. > >Hmm, that's a thought. I tracked unstable for a while, then changed my >sources.list back to woody. I have preferences set so that I don't downgrade >anything that I already have. I wonder if I have a version mismatch. Are you sure you have testing non-US in your sources.list? The crypto stuff for KDE is in non-US. Cheers :o) Johnny :o)
Re: Konqueror/SSL
On Thursday 25 October 2001 18:17 pm, Pierre Habouzit wrote: > Le Vendredi 26 Octobre 2001 00:50, Pierre Habouzit a écrit : > > > I have made the experience that it said in testing > > > that there is no installation candidate . In this case > > > - just download libssl0.9.6 , kdelibs3-crypto and > > > kdebase-crypto from the debian package site and > > > install it in the same order . Should work then . > > > > I have all of those installed, but I can't connect to any https site with > > Konqueror. I have ssl enabled in Settings->Crypto. Is there something > > else that needs to be set? > > sorry. I misread. > > I'm in unstable, and i do not have this problem. Hmm, that's a thought. I tracked unstable for a while, then changed my sources.list back to woody. I have preferences set so that I don't downgrade anything that I already have. I wonder if I have a version mismatch. -- Bud Rogers <[EMAIL PROTECTED]> They have awakened a sleeping giant and filled him with a terrible resolve.
Re: Konqueror/SSL
On Thursday 25 October 2001 17:50 pm, Pierre Habouzit wrote: > Le Vendredi 26 Octobre 2001 00:12, Bud Rogers a écrit : > > On Thursday 25 October 2001 11:41 am, Albert Heijn wrote: > > > I have made the experience that it said in testing > > > that there is no installation candidate . In this case > > > - just download libssl0.9.6 , kdelibs3-crypto and > > > kdebase-crypto from the debian package site and > > > install it in the same order . Should work then . > > > > I have all of those installed, but I can't connect to any https site with > > Konqueror. I have ssl enabled in Settings->Crypto. Is there something > > else that needs to be set? > > apt-get install kdelibs3-crypto ii kdelibs3-crypt 2.2.1-4KDE core libraries (Crypto Modules) ii kdebase-crypto 2.1.1.0-3 KDE core applications (Crypto modules) ii libssl0.9.60.9.6b-2 SSL shared libraries -- Bud Rogers <[EMAIL PROTECTED]> They have awakened a sleeping giant and filled him with a terrible resolve.
Re: Konqueror/SSL
Le Vendredi 26 Octobre 2001 00:50, Pierre Habouzit a écrit : > > I have made the experience that it said in testing > > that there is no installation candidate . In this case > > - just download libssl0.9.6 , kdelibs3-crypto and > > kdebase-crypto from the debian package site and > > install it in the same order . Should work then . > > I have all of those installed, but I can't connect to any https site with > Konqueror. I have ssl enabled in Settings->Crypto. Is there something > else that needs to be set? sorry. I misread. I'm in unstable, and i do not have this problem. -- Don't be afraid ... I'm going to give you the choice, I've never had (°> / ) MadCoder (53 53) ^^ ftp://MadCoder..:: 60 Go mp3, mp4, jeux ::..
Re: Konqueror/SSL
Le Vendredi 26 Octobre 2001 00:12, Bud Rogers a écrit : > On Thursday 25 October 2001 11:41 am, Albert Heijn wrote: > > I have made the experience that it said in testing > > that there is no installation candidate . In this case > > - just download libssl0.9.6 , kdelibs3-crypto and > > kdebase-crypto from the debian package site and > > install it in the same order . Should work then . > > I have all of those installed, but I can't connect to any https site with > Konqueror. I have ssl enabled in Settings->Crypto. Is there something > else that needs to be set? apt-get install kdelibs3-crypto
Re: Konqueror/SSL
On Thursday 25 October 2001 11:41 am, Albert Heijn wrote: > I have made the experience that it said in testing > that there is no installation candidate . In this case > - just download libssl0.9.6 , kdelibs3-crypto and > kdebase-crypto from the debian package site and > install it in the same order . Should work then . I have all of those installed, but I can't connect to any https site with Konqueror. I have ssl enabled in Settings->Crypto. Is there something else that needs to be set? -- Bud Rogers <[EMAIL PROTECTED]> They have awakened a sleeping giant and filled him with a terrible resolve.
Re: Konqueror/SSL
I have made the experience that it said in testing that there is no installation candidate . In this case - just download libssl0.9.6 , kdelibs3-crypto and kdebase-crypto from the debian package site and install it in the same order . Should work then . David --- Danie Roux <[EMAIL PROTECTED]> schrieb: > On Thu, Oct 25, 2001 at 09:05:34AM -0400, Frank > Stolze wrote: > > Hi, > > > > I'm using KDE including Konqueror from unstable > (2.2.1.0-4, > > sparc). At what point can one expect SSL support > to be added > > to Konqueror 2.2.1? > > It's there since ever. You want SSL support right? > Now that's crypto. > Which means it has to be in non-US. And it's the > whole kde that needs > it: > > apt-get install kdebase-crypto > > -- > Danie Roux *shuffle* Adore Unix > > > -- > To UNSUBSCRIBE, email to > [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > __ Es ist soweit: das Nokia Game beginnt. Sei bereit für das multimediale Abenteuer. Melde dich bis zum 3. November bei http://de.promotions.yahoo.com/info/nokiagame an!
Re: Konqueror/SSL
Ah, thank you. These things aren't always obvious to recent converts from certain other Linux distributions ;) At 05:45 PM 10/25/01 +0200, Danie Roux wrote: On Thu, Oct 25, 2001 at 09:05:34AM -0400, Frank Stolze wrote: > Hi, > > I'm using KDE including Konqueror from unstable (2.2.1.0-4, > sparc). At what point can one expect SSL support to be added > to Konqueror 2.2.1? It's there since ever. You want SSL support right? Now that's crypto. Which means it has to be in non-US. And it's the whole kde that needs it: apt-get install kdebase-crypto -- Danie Roux *shuffle* Adore Unix
Re: Konqueror/SSL
On Thu, Oct 25, 2001 at 09:05:34AM -0400, Frank Stolze wrote: > Hi, > > I'm using KDE including Konqueror from unstable (2.2.1.0-4, > sparc). At what point can one expect SSL support to be added > to Konqueror 2.2.1? It's there since ever. You want SSL support right? Now that's crypto. Which means it has to be in non-US. And it's the whole kde that needs it: apt-get install kdebase-crypto -- Danie Roux *shuffle* Adore Unix
Re: Konqueror/SSL
On Thu, Oct 25, 2001 at 09:05:34AM -0400, Frank Stolze wrote: > Hi, > > I'm using KDE including Konqueror from unstable (2.2.1.0-4, > sparc). At what point can one expect SSL support to be added > to Konqueror 2.2.1? ssl support has been available for a very very long time. You might try installing the package which gives you the support...when you installed konqueror it told you what to do and it's also in the README's. Ivan -- Ivan E. Moore II [EMAIL PROTECTED] http://snowcrash.tdyc.com GPG KeyID=90BCE0DD GPG Fingerprint=F2FC 69FD 0DA0 4FB8 225E 27B6 7645 8141 90BC E0DD
Re: Konqueror/SSL
Le Jeudi 25 Octobre 2001 15:05, Frank Stolze a écrit : > I'm using KDE including Konqueror from unstable (2.2.1.0-4, > sparc). At what point can one expect SSL support to be added > to Konqueror 2.2.1? You just have to install : kdelibs3-crypto kdebase-crypto wich will give you the SSL support. -- [EMAIL PROTECTED]
Konqueror/SSL
Hi, I'm using KDE including Konqueror from unstable (2.2.1.0-4, sparc). At what point can one expect SSL support to be added to Konqueror 2.2.1? Regards, Frank
Re: Konqueror & SSL works for root, problems for others
> Where is this documented? If I were > running K's window manager would that > step not have been necessary? (But > root was running only WindowMaker, too, > so it can't be that simple.) > Any pointers would be appreciated. no clue if it is documented...I do know that kbuildsycoca is supposed to get run once in a while..and certain things are supposed to kick it off, but the way your running it may not be one of them. Ivan -- Ivan E. Moore II [EMAIL PROTECTED] http://snowcrash.tdyc.com GPG KeyID=90BCE0DD GPG Fingerprint=F2FC 69FD 0DA0 4FB8 225E 27B6 7645 8141 90BC E0DD
RE: Konqueror & SSL works for root, problems for others
>= Original Message From "Ivan E. Moore II" <[EMAIL PROTECTED]> = >On Fri, Jan 19, 2001 at 10:13:38AM -0700, gelfand wrote: >> My first post to the list. Many thanks to Ivan for making >> it possible for me to move to Debian; I'd lately been using >> Mandrake6.1 with KDE and would not have been able to >> switch if I couldn't run Korganizer. >> >> I have installed KDE2.0, including the crypto packages. >> Running Konqueror as root there are no problems with SSL. >> However, as a regular user, even though I can connect using >> SSL (as fortify.net assures me), when I try to bring up the >> "cryptography configuration" menu there is a message in the >> invoking shell >> >> Module crypto not found! >> Unknown child process 993 died > >as that user, run "kbuildsycoca" > >then try again > > >Ivan > Well, that did the trick, thanks. Where is this documented? If I were running K's window manager would that step not have been necessary? (But root was running only WindowMaker, too, so it can't be that simple.) Any pointers would be appreciated. Regards, Marty Gelfand, Dept of Physics, Colorado State University
Re: Konqueror & SSL works for root, problems for others
On Fri, Jan 19, 2001 at 10:13:38AM -0700, gelfand wrote: > My first post to the list. Many thanks to Ivan for making > it possible for me to move to Debian; I'd lately been using > Mandrake6.1 with KDE and would not have been able to > switch if I couldn't run Korganizer. > > I have installed KDE2.0, including the crypto packages. > Running Konqueror as root there are no problems with SSL. > However, as a regular user, even though I can connect using > SSL (as fortify.net assures me), when I try to bring up the > "cryptography configuration" menu there is a message in the > invoking shell > > Module crypto not found! > Unknown child process 993 died as that user, run "kbuildsycoca" then try again Ivan -- Ivan E. Moore II [EMAIL PROTECTED] http://snowcrash.tdyc.com GPG KeyID=90BCE0DD GPG Fingerprint=F2FC 69FD 0DA0 4FB8 225E 27B6 7645 8141 90BC E0DD
Konqueror & SSL works for root, problems for others
My first post to the list. Many thanks to Ivan for making it possible for me to move to Debian; I'd lately been using Mandrake6.1 with KDE and would not have been able to switch if I couldn't run Korganizer. I have installed KDE2.0, including the crypto packages. Running Konqueror as root there are no problems with SSL. However, as a regular user, even though I can connect using SSL (as fortify.net assures me), when I try to bring up the "cryptography configuration" menu there is a message in the invoking shell Module crypto not found! Unknown child process 993 died If it makes any difference, neither as root or a regular user am I running kdm or kdesktop, I'm just running selected KDE apps within WindowMaker. Martin Gelfand, Dept of Physics, Colorado State University Martin Gelfand Associate Professor.Phone: 970 491 5263 Department of Physics.Fax: 970 491 7947 Colorado State University...Email: [EMAIL PROTECTED] Fort Collins CO 80523-1875
