Bug 61626 - IPS SSL certificate not recognized
Summary: IPS SSL certificate not recognized
Status: RESOLVED FIXED
Alias: None
Product: kio
Classification: Frameworks and Libraries
Component: kssl (show other bugs)
Version: unspecified
Platform: Compiled Sources Linux
: NOR wishlist
Target Milestone: ---
Assignee: George Staikos
URL:
Keywords:
: 78619 (view as bug list)
Depends on:
Blocks:
 
Reported: 2003-07-24 18:01 UTC by Robert Broughton
Modified: 2004-07-28 21:01 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Robert Broughton 2003-07-24 18:01:09 UTC
Version:           3.1.0 (using KDE 3.1.0)
Installed from:    compiled sources
Compiler:          gcc version 2.96 20000731 (Red Hat Linux 7.1 2.96-98)
OS:          Linux (i686) release 2.4.17

When attempting to access https://greenparty.bc.ca/donate_cc.php , the message "the server certificate failed the authenticity test." The certificate used on this site was issued by IPS CA. Their certificates ARE recognized by Internet Explorer.
Comment 1 George Staikos 2004-03-28 19:10:54 UTC
*** Bug 78619 has been marked as a duplicate of this bug. ***
Comment 2 Florian Effenberger 2004-03-28 19:25:34 UTC
Anyone feeling responsible for including it? This bug report is rather old and the fix is quite easy...
Comment 3 Robert Broughton 2004-05-11 17:07:06 UTC
This problem is still present in v3.1.5 of Konqueror.
Comment 4 George Staikos 2004-07-28 05:47:28 UTC
IPS website is broken - I can't access their root files.  What's up?  Also I need to verify them against IE.
Comment 5 Florian Effenberger 2004-07-28 14:58:05 UTC
https://certs.ipsca.com works fine for me?
Comment 6 George Staikos 2004-07-28 20:16:22 UTC
Click on "our repository" and I get this:


Error de compilación de Microsoft VBScript error '800a0401' 


Se esperaba un final de instrucción 


/Store/Store.asp, line 4 

Response.Redirect("http://certs.ipsca.com/PRODUCTS/prod_overview.asp");
----------------------------------------------------------------------^
Comment 7 Florian Effenberger 2004-07-28 20:24:27 UTC
Okay, you are right. However, have a look at

http://certs.ipsca.com/Support/SSLServerSUPPORT.asp

Comment 8 George Staikos 2004-07-28 20:49:34 UTC
CVS commit by staikos: 

Add IPS CA certificate, also in IE
CCMAIL: 61626-done@bugs.kde.org


  M +6 -0      ksslcalist   1.13
  M +1 -0      localcerts   1.5
  M +18 -0     caroot/ca-bundle.crt   1.10


--- kdelibs/kio/kssl/kssl/ksslcalist  #1.12:1.13
@@ -547,2 +547,8 @@
 code=false
 
+[/C=ES/ST=BARCELONA/L=BARCELONA/O=IPS Seguridad CA/OU=Certificaciones/CN=IPS SERVIDORES/Email=ips@mail.ips.es]
+x509=MIICtzCCAiACAQAwDQYJKoZIhvcNAQEEBQAwgaMxCzAJBgNVBAYTAkVTMRIwEAYDVQQIEwlCQVJDRUxPTkExEjAQBgNVBAcTCUJBUkNFTE9OQTEZMBcGA1UEChMQSVBTIFNlZ3VyaWRhZCBDQTEYMBYGA1UECxMPQ2VydGlmaWNhY2lvbmVzMRcwFQYDVQQDEw5JUFMgU0VSVklET1JFUzEeMBwGCSqGSIb3DQEJARYPaXBzQG1haWwuaXBzLmVzMB4XDTk4MDEwMTIzMjEwN1oXDTA5MTIyOTIzMjEwN1owgaMxCzAJBgNVBAYTAkVTMRIwEAYDVQQIEwlCQVJDRUxPTkExEjAQBgNVBAcTCUJBUkNFTE9OQTEZMBcGA1UEChMQSVBTIFNlZ3VyaWRhZCBDQTEYMBYGA1UECxMPQ2VydGlmaWNhY2lvbmVzMRcwFQYDVQQDEw5JUFMgU0VSVklET1JFUzEeMBwGCSqGSIb3DQEJARYPaXBzQG1haWwuaXBzLmVzMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCsT1J0nznqjtwlxLyYXZhkJAk8IbPMGbWOlI6H0fg3PqHILVikgDVboXVsHUUMH2Fjal5vmwpMwci4YSM1gf/+rHhwLWjhOgeYlQJU3c0jt4BT18g3RXIGJBK6E2Ehim51KODFDzT9NthFf+G4Nu+z4cYgjui0OLzhPvYR3oydAQIDAQABMA0GCSqGSIb3DQEBBAUAA4GBACzzw3lYJN7GO9HgQmm47mSzPWIBubOE3yN93ZjPEKn+ANgilgUTB1RXxafey9m4iEL2mdsUdx+2/iU94aI+A6mB0i1sR/WWRowiq8jMDQ6XXotBtDvECgZAHd1G9AHduoIuPD14cJ58GNCr+Lh3B0Zx8coLY1xq+XKU1QFPoNtC
+site=true
+email=false
+code=false
+

--- kdelibs/kio/kssl/kssl/localcerts  #1.4:1.5
@@ -7,3 +7,4 @@
 dfn-root-ca-cert.pem
 argedaten-root-ca-cert.pem
+ipsservidores.pem
 

--- kdelibs/kio/kssl/kssl/caroot/ca-bundle.crt  #1.9:1.10
@@ -1843,2 +1843,20 @@
 -----END CERTIFICATE-----
 
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+


Comment 9 Florian Effenberger 2004-07-28 21:01:33 UTC
Thanks! ;-)