Bug 59115 - multiple certificates don't work properly
Summary: multiple certificates don't work properly
Status: RESOLVED NOT A BUG
Alias: None
Product: kio
Classification: Frameworks and Libraries
Component: kssl (show other bugs)
Version: unspecified
Platform: Compiled Sources Linux
: NOR normal
Target Milestone: ---
Assignee: George Staikos
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-05-29 18:57 UTC by Charles Samuels
Modified: 2003-06-01 00:28 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Charles Samuels 2003-05-29 18:57:44 UTC
Version:            (using KDE Devel)
Installed from:    Compiled sources

my (self-signed) certificate seems to think that its Common Name is "altair.derkarl.org, localhost", using the comma as a delimiter.  KSSL doesn't like that and thinks that localhost is the only common name.

You can give it a shot by configuring KMail for pop3 (with SSL, LOGIN method), connect to altair.derkarl.org, port 995, and I presume that it will deal with the cert before trying to login, so no valid passwd is needed.
Comment 1 George Staikos 2003-05-29 22:58:28 UTC
I cannot reproduce this with HEAD.  Which OpenSSL version are you using?  What 
does it say for the "Subject" if you run: 
 
openssl s_client -connect yourhost:995 -showcerts 
 
? 
Comment 2 Charles Samuels 2003-05-30 05:24:23 UTC
Subject: Re:  multiple certificates don't work properly

On Thursday 29 May 2003 1:58, you wrote:
> ------- Additional Comments From staikos@kde.org  2003-05-29 22:58 -------
> I cannot reproduce this with HEAD.  Which OpenSSL version are you using? 
> What does it say for the "Subject" if you run:

openssl-0.9.6g

subject=/C=US/ST=California/L=San Jose/O=Stunnel Developers 
Ltd/CN=altair.derkarl.org/CN=localhost

>
> openssl s_client -connect yourhost:995 -showcerts
>
> ?

Comment 3 Charles Samuels 2003-05-30 05:25:36 UTC
Subject: Re:  multiple certificates don't work properly

Hm, I rebooted and it stopped complaining, yet it still shows to CNs...


Comment 4 George Staikos 2003-05-30 15:25:44 UTC
Subject: Re:  multiple certificates don't work properly

On Thursday 29 May 2003 23:25, you wrote:

> Hm, I rebooted and it stopped complaining, yet it still shows to CNs...

  Yes it should show two CNs.  So this isn't a problem anymore?

Comment 5 Charles Samuels 2003-05-31 23:33:49 UTC
Subject: Re:  multiple certificates don't work properly

On Friday 30 May 2003 6:25, you wrote:
> Subject: Re:  multiple certificates don't work properly
>
> On Thursday 29 May 2003 23:25, you wrote:
> > Hm, I rebooted and it stopped complaining, yet it still shows to CNs...
>
>   Yes it should show two CNs.  So this isn't a problem anymore?

Yes, but that's with your comma patch (ksslpeerinfo.cc -r 1.43)

-Charles

Comment 6 George Staikos 2003-05-31 23:35:05 UTC
Subject: Re:  multiple certificates don't work properly

On Saturday 31 May 2003 17:33, you wrote:
> >   Yes it should show two CNs.  So this isn't a problem anymore?
>
> Yes, but that's with your comma patch (ksslpeerinfo.cc -r 1.43)

  I reverted it again though.  Can you see if reverting it makes a difference 
for you?

Comment 7 Charles Samuels 2003-06-01 00:02:00 UTC
Subject: Re:  multiple certificates don't work properly

On Saturday 31 May 2003 2:35, you wrote:
> > Yes, but that's with your comma patch (ksslpeerinfo.cc -r 1.43)
>
>   I reverted it again though.  Can you see if reverting it makes a
> difference for you?

Ok, I updated, make installed in kio, killed pop3, ran kdeinit, and it still 
seems to work.


Comment 8 George Staikos 2003-06-01 00:05:24 UTC
Subject: Re:  multiple certificates don't work properly

On Saturday 31 May 2003 18:02, you wrote:
> On Saturday 31 May 2003 2:35, you wrote:
> > > Yes, but that's with your comma patch (ksslpeerinfo.cc -r 1.43)
> >
> >   I reverted it again though.  Can you see if reverting it makes a
> > difference for you?
>
> Ok, I updated, make installed in kio, killed pop3, ran kdeinit, and it
> still seems to work.

   Ok, tell me if you think that this is not a bug but perhaps a weird local 
problem that is gone.  That way I know to close this bug and not think about 
it anymore. ;)

Comment 9 Charles Samuels 2003-06-01 00:28:38 UTC
well, everything was working fine, then it stopped working, then I logged into kde again, and it 
worked, so it must be invalid.  Sorry for all this :)