| Summary: | kmail won't accept forever new imap ssl certificates | ||
|---|---|---|---|
| Product: | [Unmaintained] kmail | Reporter: | h <h> |
| Component: | IMAP | Assignee: | kdepim bugs <kdepim-bugs> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | ismail, joachim.eibl, travisgevans |
| Priority: | NOR | ||
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Platform: | FreeBSD Ports | ||
| OS: | Linux | ||
| Latest Commit: | Version Fixed In: | ||
| Sentry Crash Report: | |||
|
Description
h
2005-11-19 21:54:56 UTC
does anyone care about this bug? What does it actually say? Certificate expired or authenticity problem? it says: certificate signing authority is unknown or invalid. I do: accept forever everytime and then the next day, boom. "the server certificate failed the authenticity test" continue accept forever at least once a day i get the popup even tho i accept forever. KMail uses TCPSlaveBase for SSL. So wonder if the same problem happens in konqueror, ie is there a https:// website for the same host with the same certificate. I think this could be a bug in kdelibs and not kmail. We used to have this bug a long time ago. George, any advice? yes i saw reports from back to 2001 about that but i thought what the heck i'm just gonna resubmit, cause it's gotta be new ... *** Bug 124781 has been marked as a duplicate of this bug. *** I've had this happening in KDE 3.5.0 through 3.5.3, in KMail with an IMAP account. It seems to be able to remember the setting on start up of KMail, not showing the dialog, but occasionally forgets it, even though I always select "Accept Forever". Maybe it only happened when the server was reconnected after a connection error. I haven't seen the dialog with "Accept Forever / Current Session Only" in Konqueror, so I don't know whether it's KMail only. my IT modified something on the server so it no longer happens, that's an unelegant, yet good workaround for the problem. *** This bug has been confirmed by popular vote. *** I see this with KMail 3.5.x on FreeBSD with IMAP SSL certs. In my case, I use an SSH tunnel so that KMail is connecting to a port on localhost, and the reason in the dialog box is that the hostname in the SSL cert doesn't match. Problem may extend to POP accounts, at least w/ KMAIL 1.9.50. You can click on "details" all you want, no action seems to be attached to the button. > Problem may extend to POP accounts, at least w/ KMAIL 1.9.50.
Fixed today. Some earlier change to fix SSL version problems lead to the ioslave "forgetting" the host name it was connected to which in turn lead to breakage in the handling of SSL rules. About comment 13 "You can click on "details" all you want, no action seems to be attached to the button.": That may be a different problem and maybe it isn't fixed yet. Please test again. Still an issue on KDE 3.5.10 with server pop.central.cox.net using SSL. The certificate is actually issued to spop.east.cox.net, so I get a warning message. I click “accept forever”, it works for a few hours, then I suspend the machine to disk for the night, then the next day as soon as I bring it back up kmail pops up the same message all over again. |