Bug 116723 - kmail won't accept forever new imap ssl certificates
Summary: kmail won't accept forever new imap ssl certificates
Status: RESOLVED FIXED
Alias: None
Product: kmail
Classification: Unmaintained
Component: IMAP (show other bugs)
Version: unspecified
Platform: FreeBSD Ports Linux
: NOR normal
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
: 124781 (view as bug list)
Depends on:
Blocks:
 
Reported: 2005-11-19 21:54 UTC by h
Modified: 2008-11-30 01:08 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description h 2005-11-19 21:54:56 UTC
Version:            (using KDE KDE 3.4.3)
Installed from:    FreeBSD Ports

ever since our imap server moved, once a day kmail pops up a warning about the ssl certificate of my imap connection. once a day i click: accept forever and the next day i get the new warning box popping up again.
Comment 1 h 2005-11-26 20:59:08 UTC
does anyone care about this bug?
Comment 2 Ismail Donmez 2005-11-26 21:31:50 UTC
What does it actually say? Certificate expired or authenticity problem? 
Comment 3 h 2005-11-26 21:41:55 UTC
it says: certificate signing authority is unknown or invalid.

I do: accept forever everytime and then the next day, boom.
Comment 4 h 2005-11-27 13:18:40 UTC
"the server certificate failed the authenticity test"
continue
accept forever

at least once a day i get the popup even tho i accept forever.
Comment 5 Ismail Donmez 2005-11-27 15:22:10 UTC
KMail uses TCPSlaveBase for SSL. So wonder if the same problem happens in konqueror, ie is there a https:// website for the same host with the same certificate. I think this could be a bug in kdelibs and not kmail.
Comment 6 Thiago Macieira 2005-11-27 16:08:52 UTC
We used to have this bug a long time ago.

George, any advice?
Comment 7 h 2005-11-27 16:14:09 UTC
yes i saw reports from back to 2001 about that but i thought what the heck i'm 
just gonna resubmit, cause it's gotta be new ...
Comment 8 Thiago Macieira 2006-04-05 09:28:39 UTC
*** Bug 124781 has been marked as a duplicate of this bug. ***
Comment 9 Yaohan Chen 2006-06-23 19:58:33 UTC
I've had this happening in KDE 3.5.0 through 3.5.3, in KMail with an IMAP account. It seems to be able to remember the setting on start up of KMail, not showing the dialog, but occasionally forgets it, even though I always select "Accept Forever". Maybe it only happened when the server was reconnected after a connection error. I haven't seen the dialog with "Accept Forever / Current Session Only" in Konqueror, so I don't know whether it's KMail only.
Comment 10 h 2006-08-19 14:21:10 UTC
my IT modified something on the server so it no longer happens, that's an unelegant, yet good workaround for the problem.
Comment 11 Gunnar Grim 2007-04-02 17:25:40 UTC
*** This bug has been confirmed by popular vote. ***
Comment 12 John Baldwin 2007-05-02 16:50:09 UTC
I see this with KMail 3.5.x on FreeBSD with IMAP SSL certs.  In my case, I use an SSH tunnel so that KMail is connecting to a port on localhost, and the reason in the dialog box is that the hostname in the SSL cert doesn't match.
Comment 13 Kevin Coonan 2008-02-12 06:52:41 UTC
Problem may extend to POP accounts, at least w/ KMAIL 1.9.50.  You can click on "details" all you want, no action seems to be attached to the button.
Comment 14 Thomas McGuire 2008-02-14 18:05:42 UTC
> Problem may extend to POP accounts, at least w/ KMAIL 1.9.50. 
Comment 15 Andreas Hartmetz 2008-03-13 00:07:00 UTC
Fixed today. Some earlier change to fix SSL version problems lead to the ioslave "forgetting" the host name it was connected to which in turn lead to breakage in the handling of SSL rules.
Comment 16 Andreas Hartmetz 2008-03-13 00:10:48 UTC
About comment 13 "You can click on "details" all you want, no action seems to be attached to the button.": That may be a different problem and maybe it isn't fixed yet. Please test again.
Comment 17 Travis Evans 2008-11-30 01:08:59 UTC
Still an issue on KDE 3.5.10 with server pop.central.cox.net using SSL.  The certificate is actually issued to spop.east.cox.net, so I get a warning message.  I click “accept forever”, it works for a few hours, then I suspend the machine to disk for the night, then the next day as soon as I bring it back up kmail pops up the same message all over again.