[Bug 334191] Re: KDE 4 branch SSL certificates support completely broken
** Changed in: kdelibs Status: New => Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
*** This bug has been confirmed by popular vote. *** -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
I don't know, I didn't set the NEEDSINFO status. This was just an automated reminder. I'll mark it REPORTED for now. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
Dear Bug Submitter, This bug has been in NEEDSINFO status with no change for at least 15 days. Please provide the requested information as soon as possible and set the bug status as REPORTED. Due to regular bug tracker maintenance, if the bug is still in NEEDSINFO status with no change in 30 days, the bug will be closed as RESOLVED > WORKSFORME due to lack of needed information. For more information about our bug triaging procedures please read the wiki located here: https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging If you have already provided the requested information, please set the bug status as REPORTED so that the KDE team knows that the bug is ready to be confirmed. Thank you for helping us make KDE software even better for everyone! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
What info is needed? There has been some progress, both in what Konqueror can do, and about what's now considered good practice, so the situation is not the same as in 2008 anymore. If you want to check whether server certificate work, go through https://badssl.com, that is a full test suite for everything around ssl certificates and some more. All green links shall work, all red links shall error. There needs to be a way to deal with client certificates (also tested; badssl.com provides two certificates, a good and a bad one to check success and failure). There are still several cases on badssl.com where Konqueror misbehaves, but it's not that awful. pinning- test is something that is phased out (i.e. even Chromium accepts the pinning-test site). I've succeeded to add my own untrustworthy CA (one of my own test cases) permanently (which is good), but didn't find a way to get rid of it again (which is not so good), though I rm'd the ksslcertificatemanager file in ~/.config, which contained said certificate. Maybe I just need to log out and log in again to make that effective. My CA has the usual three-stage process, so there's a root, an intermediate, and an actual server certificate. After allowing that certificate “permanently”, the root still was untrusted (ok), the intermediate was trusted (not so good), and as a consequence the server certificate is trusted. The “trust certificate permanently” should only trust the certificate itself, otherwise KDE should provide an option to select which certificate in the chain should be trusted permanently. It also should be possible later to remove such trust of user-imported certificates. And the certificate box should state that the trust has been overridden by the user's own import. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191] Re: KDE 4 branch SSL certificates support completely broken
** Changed in: kdelibs Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
(In reply to Rolf Eike Beer from comment #88) > Even if it is unrelated to that bug: for OpenSUSE you have the possibility > to just install the package ca-certificates-cacert and have it in the system > store without further work. Yes, thanks. I already have this package installed. Your tip can be seen as a general work-around for incomplete SSL support in KDE. Root certificates can be always installed system-wide. Personally I am currently more interested in importing my SSL client certificate, so that KDE applications like Dolphin, Konqueror or Dolphin can use it for authentication purposes. Here I don't see a possibility to do this system-wide and in KDE it's not possible. This problem matches the title of this bug, but not the description. See #319049. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
(In reply to Rick Alther from comment #84) > I know this is old, but this is still an issue with KDE 4.12.3 (Fedora 20). > * I go into the SSL Preferences of the System Settings > * Click Add... > * Select a .der CA certificate. The dialog goes away and the certificate is > not listed in the SSL Signers. It just silently fails. The situation is still the same (tested on openSUSE Tumbleweed 20160625). I use KDE Plasma 5.6.4 and KDE Frameworks 5.23.0. systemsettings (KDE 4, package kdebase4-workspace-addons) has a SSL configuration, but it does not add the Cacert.org root certificates (https://wiki.cacert.org/FAQ/ImportRootCert#KDE). systemsettings5 has no SSL section. > Being able to add trusted CA certs is important, particularly in enterprises. Yes, I agree. Strong authentication (e.g. with SSL client certificates and smart cards) becomes more and more important. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
Even if it is unrelated to that bug: for OpenSUSE you have the possibility to just install the package ca-certificates-cacert and have it in the system store without further work. -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191]
Andreas - this appears to be working. I'm not sure if it's the newer version of KDE I'm using (4.13.3) or the fact that it's installing them under User-added certificates all the way at the bottom of the list and I never noticed that before. So, they are being added, however, I would suggest adding some sort of feedback to the user that they were added. Perhaps a dialog showing that it added n certificates and show their name or display that in a status-bar like message. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
I know this is old, but this is still an issue with KDE 4.12.3 (Fedora 20). * I go into the SSL Preferences of the System Settings * Click Add... * Select a .der CA certificate. The dialog goes away and the certificate is not listed in the SSL Signers. It just silently fails. Being able to add trusted CA certs is important, particularly in enterprises. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
Rick: Please open a new bug for this and add it here to the Depends: list. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
I think what is needed here is a guy who knows what SSL is and how it works. And who takes the time to implement it. I feel like talking with some indian outsourcer here, whom you tell You have not implemented the SSL protocol, only a subset, and the answer is a parrot saying I need more info, I need more info. Here's more info: http://tools.ietf.org/html/rfc6101 That's the latest RFC on TLS; you will best use OpenSSL to implement it, which does most of the stuff for you: http://www.openssl.org/docs/ssl/ssl.html So, I think that's enough of information: The SSL/TLS implementation in KDE 4 implements only a small subset. It needs some serious effort to get it usable. KDE 3's SSL support was complete and worked. However, that guy apparently left, and the rest of the KDE team can only do flashy GUI stuff. This is not flashy GUI stuff, this is serious cryptography stuff. Therefore, nobody cares. -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191]
The deficiencies in KDE4 have a lot more to do with X.509 than with SSL/TLS. The protocol implementation is fairly complete. What is lacking is a way of managing the available X.509 principals, trust settings, validation settings for the trust engine (e.g., CRL, OCSP), client certificate authentication settings for KIO, and so forth. -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191]
KDE 4.9.5, still not working, and this bug is in needsinfo since idunnohowlong. What is needed here? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191]
What I've run into recently is that it fails to work with SSL client certificates. On Thu, Jan 17, 2013 at 06:02:12PM +, Mathias Homann wrote: https://bugs.kde.org/show_bug.cgi?id=162485 --- Comment #80 from Mathias Homann mathias.hom...@opensuse.org --- KDE 4.9.5, still not working, and this bug is in needsinfo since idunnohowlong. What is needed here? -- You are receiving this mail because: You voted for the bug. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 334191] Re: KDE 4 branch SSL certificates support completely broken
This was closed upstream for being a potpourri of fixed and still open bugs, so I'll do this same for this one. Separate issues can be tracked as they occur. ** Changed in: kde4libs (Ubuntu) Status: Triaged = Invalid -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in Ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken To manage notifications about this bug go to: https://bugs.launchpad.net/kdelibs/+bug/334191/+subscriptions -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191] Re: KDE 4 branch SSL certificates support completely broken
** Changed in: kdelibs Status: Unknown = Incomplete -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191] Re: KDE 4 branch SSL certificates support completely broken
** Changed in: kdelibs Importance: Unknown = High -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in ubuntu. https://bugs.launchpad.net/bugs/334191 Title: KDE 4 branch SSL certificates support completely broken -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191] Re: KDE 4 branch SSL certificates support completely broken
** Changed in: kdelibs Status: Confirmed = Unknown -- KDE 4 branch SSL certificates support completely broken https://bugs.launchpad.net/bugs/334191 You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in ubuntu. -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191] Re: KDE 4 branch SSL certificates support completely broken
Could you please link /usr/share/kde4/apps/kssl/ca-bundle.crt to /etc/ssl/certs/ca-certificates.crt? IMHO there's no reason for KDE to have a different set of certificates from the system's ones. Thanks, Antonis Kanouras -- KDE 4 branch SSL certificates support completely broken https://bugs.launchpad.net/bugs/334191 You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in ubuntu. -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191] Re: KDE 4 branch SSL certificates support completely broken
** Description changed: - KDE SSL certificates support in all the KDE 4, 4.1, 4.2 series is - completely broken. KDE bug : https://bugs.kde.org/show_bug.cgi?id=162485 + KDE SSL certificates support in all of the KDE 4.0-4.3 series is completely broken. + KDE bug: https://bugs.kde.org/show_bug.cgi?id=162485 This impacts (makes impossible) all use of SSL certificates in KDE, including KMail. This is a real show-stopper to me and I can't believe that such a regression exists between KDE 3.x and 4.x and that nothing was done about this since this bug was initially reported in May 2008 to the KDE bugtracker. -- KDE 4 branch SSL certificates support completely broken https://bugs.launchpad.net/bugs/334191 You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in ubuntu. -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191] [NEW] KDE 4 branch SSL certificates support completely broken
You have been subscribed to a public bug: KDE SSL certificates support in all the KDE 4, 4.1, 4.2 series is completely broken. KDE bug : https://bugs.kde.org/show_bug.cgi?id=162485 This impacts (makes impossible) all use of SSL certificates in KDE, including KMail. This is a real show-stopper to me and I can't believe that such a regression exists between KDE 3.x and 4.x and that nothing was done about this since this bug was initially reported in May 2008 to the KDE bugtracker. ** Affects: kde4libs (Ubuntu) Importance: High Status: Triaged -- KDE 4 branch SSL certificates support completely broken https://bugs.edge.launchpad.net/bugs/334191 You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in ubuntu. -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191] Re: KDE 4 branch SSL certificates support completely broken
** Changed in: kde4libs (Ubuntu) Sourcepackagename: meta-kde = kde4libs Importance: Undecided = High Status: New = Triaged ** Bug watch added: KDE Bug Tracking System #162485 http://bugs.kde.org/show_bug.cgi?id=162485 ** Also affects: kdelibs via http://bugs.kde.org/show_bug.cgi?id=162485 Importance: Unknown Status: Unknown -- KDE 4 branch SSL certificates support completely broken https://bugs.launchpad.net/bugs/334191 You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in ubuntu. -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191] Re: KDE 4 branch SSL certificates support completely broken
** Changed in: kdelibs Status: Unknown = Confirmed -- KDE 4 branch SSL certificates support completely broken https://bugs.launchpad.net/bugs/334191 You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kde4libs in ubuntu. -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs
[Bug 334191] [NEW] KDE 4 branch SSL certificates support completely broken
Public bug reported: KDE SSL certificates support in all the KDE 4, 4.1, 4.2 series is completely broken. KDE bug : https://bugs.kde.org/show_bug.cgi?id=162485 This impacts (makes impossible) all use of SSL certificates in KDE, including KMail. This is a real show-stopper to me and I can't believe that such a regression exists between KDE 3.x and 4.x and that nothing was done about this since this bug was initially reported in May 2008 to the KDE bugtracker. ** Affects: meta-kde (Ubuntu) Importance: Undecided Status: New -- KDE 4 branch SSL certificates support completely broken https://bugs.launchpad.net/bugs/334191 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
