Bug 145318 - cannot obtain free thawte certificate using konqueror - "Unable to parse SPKAC ASN.1."
Summary: cannot obtain free thawte certificate using konqueror - "Unable to parse SPKA...
Status: RESOLVED UNMAINTAINED
Alias: None
Product: konqueror
Classification: Applications
Component: general (show other bugs)
Version: 3.5
Platform: Gentoo Packages Linux
: NOR normal
Target Milestone: ---
Assignee: Konqueror Developers
URL:
Keywords: triaged
Depends on:
Blocks:
 
Reported: 2007-05-11 16:46 UTC by Maciej Grela
Modified: 2012-06-18 14:09 UTC (History)
5 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Maciej Grela 2007-05-11 16:46:39 UTC
Version:            (using KDE KDE 3.5.6)
Installed from:    Gentoo Packages
Compiler:          gcc (GCC) 4.1.2 (Gentoo 4.1.2) 
OS:                Linux

When I try to request a free thawte e-mail certificate from www.thawte.com the server responds with the following error:

Unable to parse SPKAC ASN.1.

This happens at the end after entering the password to encrypt the private key in the certificate. I`m choosing a "Mozilla/Thunderbird" type certificate.
Comment 1 Matija Šuklje 2008-03-02 14:49:15 UTC
Same happens to me on KDE 3.5.9.

Did you find any way to work around this problem?
Comment 2 Matija Šuklje 2008-03-02 14:50:54 UTC
(sorry, forgot to add myself to CC)

I also sent a support request to Thawte and intend to post any relevant info here when I get a reply.
Comment 3 Matija Šuklje 2008-03-02 16:23:53 UTC
The same joy happens with CAcert :P
Comment 4 Maciej Grela 2008-03-05 20:54:59 UTC
The worst thing is that it seems nobody cares about this bug :/. Maybe it got fixed in KDE4 but I don`t have the time to check.
Comment 5 Matija Šuklje 2008-03-05 21:14:25 UTC
The workaround that I used was to request the certificate(s) in Firefox. Export/"backup" them from Firefox to a .p12 file and then import that .p12 into Konqueror.

Ugly, sounds like we're back in the middle ages, but at least it works :/

Maybe we should vote on this bug to make it more seen.
Comment 6 Michael Leupold 2008-10-12 19:20:14 UTC
I can still confirm this bug on KDE 4.1.2.
Comment 7 Maciej Grela 2008-10-14 16:59:41 UTC
Not fixed in 3.5.10 either. Guess everybody is so worked up with new uuuuhhh-shiny Plasma, that nobody bothers to actually make something work. Sad.
Comment 8 Maciej Grela 2008-12-14 21:20:16 UTC
I've created a pledge to fix this issue on GNU Herds. Hope others interested in finally squashing this bug will add to it so that a KDE developer will be more likely to pick it up ;).
Comment 9 Albert Astals Cid 2008-12-15 22:10:13 UTC
Making shiny comments about plasma shinyness is not going to help you getting this fixed.
Comment 10 Brad Hards 2008-12-16 10:07:54 UTC
I eventually managed to work through the process of registering.

There is a wizard process that appears to work OK, up to this point:

<HTML lang="en">

			<HEAD>
			<TITLE>generate certificate public key</TITLE>
			
				<META http-equiv="Content-Type" content="text/html; charset=UTF-8">
				<LINK REL="stylesheet" HREF="/dynamic/en/style/style.css" TYPE="text/css">
				<SCRIPT SRC="/dynamic/en/scripts/newscripts_wizards.js"></SCRIPT></HEAD>
<BODY BGCOLOR="#ffffff" LEFTMARGIN="0" TOPMARGIN="0" MARGINWIDTH="0" MARGINHEIGHT="0">

            <table width="498" border="0" cellspacing="0" cellpadding="0" HEIGHT="496">
            <TR><td width="498" bgcolor="#efefef" HEIGHT=40><DIV ALIGN="center">
            <span class="blueHeader">[ generate certificate public key ]</span></DIV>
            </td></tr><tr><td height="1" bgcolor="#666666"></td></tr>
            <tr><td VALIGN="top"><BR><BR><blockquote>
<script language="VBScript" src="/dynamic/en/scripts/gen_csr_code_sign.vbs"></script>
<script language="VBScript" src="/dynamic/en/scripts/gen_csr_personal_cert.vbs"></script>
<FORM METHOD=POST ACTION="x509.confirm.exe" NAME="enrollmentForm" ID="enrollmentForm">

<INPUT TYPE=HIDDEN NAME="fntok" VALUE="8uRcWxaRsLfQcwHTuPJkpd">
<B> Public Key</B><BR><BR>

<P>Your Personal Certificate will contain a
    <A HREF="/ssl-digital-certificates/technical-support/email/sign.html" TARGET="pk">public key</A>.
    People will use that public key to encrypt information for your eyes only.

    
        If the drop-down listbox below does not include 1024-bit keys, then
        you should update your browser to full-strength crypto by downloading
        a new browser from Netscape. If for some reason you cannot do that,
        then try installing
        <A HREF="http://www.fortify.net/" TARGET="fortify">Fortify</A>
        to upgrade your browser to full-strength crypto.<P>

        <BLOCKQUOTE>
        <KEYGEN NAME="spkac" CHALLENGE="beuux2Qrmx8sjK79">
        </BLOCKQUOTE>
        <BR><B> Continue...</B><BR><BR><P>You can
    continue your request by pressing "Next" below.
    If necessary your browser will walk you through the public key
    generation process.</P><BR><BR>
    
<P><BR><BR><BLOCKQUOTE><INPUT TYPE=IMAGE SRC="/images/PCS/buttonNext.gif" VALUE="next" ALT="next" BORDER="0"> 
</BLOCKQUOTE></P>
</FORM>

        
        </blockquote></td></tr><tr><td height="1" bgcolor="#666666"></td></tr>
        <tr><td HEIGHT="40" bgcolor="#efefef"></td></tr>
        </table>
        </BODY>
</HTML>

The step after that complains:
Form Processing Error

An error occurred while we were processing your form. Usually this means that one of the values you submitted in your form was invalid, or you did not put a value in a required field. Please check the error message below, and then review your submission.

The actual error given was:

No SPKAC received. What browser are you using?


So the problem appears to be the <keygen> implementation (or lack of, perhaps)
Comment 11 Brad Hards 2008-12-16 10:20:46 UTC
Appears to be a duplicate of #28539.
Comment 12 Myriam Schweingruber 2012-06-18 14:09:42 UTC
Message from the Bugsquad and Konqueror teams:
This bug is closed as outdated, as we do not have the manpower to maintain the KDE3 version anymore.
If you still can reproduce this issue with Konqueror 4.8.4 or later, please open a new report.
Thank you for your understanding.