Bug 153691 - Kmail SMTP Client side Certificates not working
Summary: Kmail SMTP Client side Certificates not working
Status: RESOLVED WORKSFORME
Alias: None
Product: kmail
Classification: Applications
Component: encryption (show other bugs)
Version: unspecified
Platform: unspecified Linux
: NOR normal
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-12-08 19:33 UTC by Nikolay Pavlov
Modified: 2007-12-08 23:32 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nikolay Pavlov 2007-12-08 19:33:13 UTC
Version:           неизв. (using KDE 3.5.8, Kubuntu (gutsy) 4:3.5.8-0ubuntu3.1)
Compiler:          Target: i486-linux-gnu
OS:                Linux (i686) release 2.6.22-14-generic

For some reason SMTP X509 Certificate Authentication is not working in Kmail.
After selecting appropriate certificate in the dialog it fails with Access Denied error.
SMTP server was configured to allow delivery only if Certificate is valid.
Here is a log:

Dec  8 20:24:00 cassini postfix/smtpd[30785]: setting up TLS connection from hq[89.162.141.1]
Dec  8 20:24:00 cassini postfix/smtpd[30785]: SSL_accept:before/accept initialization
Dec  8 20:24:00 cassini postfix/smtpd[30785]: SSL_accept:error in SSLv2/v3 read client hello A
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:error in SSLv2/v3 read client hello B
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 read client hello A
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 write server hello A
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 write certificate A
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 write key exchange A
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 write server done A
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 flush data
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:error in SSLv3 read client certificate A
Dec  8 20:24:05 cassini last message repeated 2 times
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 read client key exchange A
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:error in SSLv3 read certificate verify A
Dec  8 20:24:05 cassini last message repeated 3 times
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 read finished A
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 write change cipher spec A
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 write finished A
Dec  8 20:24:05 cassini postfix/smtpd[30785]: SSL_accept:SSLv3 flush data
 
The same Certificate verification via IMAP work well.
Comment 1 Nikolay Pavlov 2007-12-08 23:32:44 UTC
Please close this report. That was false positive. Sorry for noise.