| Summary: | No obvious way to add trusted certificates/CAs for SSL or TLS | ||
|---|---|---|---|
| Product: | [Unmaintained] kio | Reporter: | Guido Winkelmann <guido-kdebugs> |
| Component: | kssl | Assignee: | Konqueror Developers <konq-bugs> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | normal | CC: | adawit, alther, bekesa, bugsnmd, kdebugs.boog, m.debruijne, quazgar, rasasi78, registrace |
| Priority: | NOR | ||
| Version: | unspecified | ||
| Target Milestone: | --- | ||
| Platform: | Gentoo Packages | ||
| OS: | Linux | ||
| Latest Commit: | Version Fixed In: | ||
| Sentry Crash Report: | |||
| Attachments: | greyed-out-import-button | ||
|
Description
Guido Winkelmann
2009-10-12 19:26:29 UTC
This bug is 6 months old and still unconfirmed. The requested functionality is obviously missing, I've searched the net for hours and did not find the way to import SSL CA certs. I guess the problem is masked by the presence of the 'Kleopatra' tool that does manage certificates, but it is not obvious that the certificates it manages has nothing to do with the ones used for SSL/TLS. This missing feature is a serious problem. Please confirm the bug, and somebody please mention a workaround as well. Here the workaround solution that I have used (Kubuntu 10.04). In my case, my new SSL cert for uses a chained certificate, and was loading with an authenticity check warning because "Entrust.net Certification Authority (2048)" was not included in KDE's ca-bundle.crt. And to add insult to injury KDE no longer has a GUI to import CA Certificates. Simply appending the Entrust.net_Premium_2048_Secure_Server_CA.crt (already installed from the Ubuntu package "ca-certificates") to KDE's ca-bundle.crt then restarting KDE fixed this issue for both konqueror and kmail. # cp -p /usr/share/kde4/apps/kssl/ca-bundle.crt /usr/share/kde4/apps/kssl/ca-bundle.crt.orig # cat /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt >> /usr/share/kde4/apps/kssl/ca-bundle.crt Restart KDE Hello. I can confirm this bug for KDE 4.7.4 I can confirm this for KDE 4.9.5 (Linux Mint 14 KDE). To give a few more details on this as I am experiencing it... There IS a certificate management module in system settings (try searching them or krunner for ssl preferences). However when I go into this it a) fails to recognise where I have certificates (the open with dialogue has a filter for der/pem/something else certs which fails to seee them), b) when I work round this (view all, add certificates anyway) it returns to the main frame but doesn't seem to have imported the certificates. There is another way of doing this which also doesn't seem to work (will attach screenshot in a sec)- download certificate, double click to open and IMPORT BUTTON IS GREYED OUT with no explanation. This bug has now been around for a while with no effort on it and is down as assigned to 'unassigned bugs mailing list', does anyone want to get onto the kde irc with an attempt to sort this out? Created attachment 80731 [details]
greyed-out-import-button
I know this is old, but this is still an issue with KDE 4.12.3 (Fedora 20). * I go into the SSL Preferences of the System Settings * Click Add... * Select a .der CA certificate. The dialog goes away and the certificate is not listed in the SSL Signers. It just silently fails. Being able to add trusted CA certs is important, particularly in enterprises. (In reply to Rick Alther from comment #6) > I know this is old, but this is still an issue with KDE 4.12.3 (Fedora 20). > * I go into the SSL Preferences of the System Settings > * Click Add... > * Select a .der CA certificate. The dialog goes away and the certificate is > not listed in the SSL Signers. > > It just silently fails. Being able to add trusted CA certs is important, > particularly in enterprises. This one I can reproduce, but only for certs in .der format. I have a fix for it. All the other reports including the original one should no longer be an issue because there is SSL preferences dialog that allow you to add new certs. Hi Dawit, There has been a preferences dialog that allows you to add new certs for quite some time, but as other bug reporters have noted, it silently failed. Which version do you think this has been fixed in? To quote Rick Alter: "* I go into the SSL Preferences of the System Settings * Click Add... * Select a .der CA certificate. The dialog goes away and the certificate is not listed in the SSL Signers." Have you tried this? does it work for you? It's a shame that the status of this bug is still listed as unconfirmed, given that it has quite a few registerd votes and subscribed members, and must be fairly important for some users. (In reply to Nick from comment #8) > Hi Dawit, > There has been a preferences dialog that allows you to add new certs for > quite some time, but as other bug reporters have noted, it silently failed. > Which version do you think this has been fixed in? > To quote Rick Alter: > "* I go into the SSL Preferences of the System Settings > * Click Add... > * Select a .der CA certificate. The dialog goes away and the certificate is > not listed in the SSL Signers." > > Have you tried this? does it work for you? Like I have already stated in comment #7, not being able to import a cert in DER format is the only issue I can reproduce. And have already fixed. See bug #333079. > It's a shame that the status of this bug is still listed as unconfirmed, > given that it has quite a few registerd votes and subscribed members, and > must be fairly important for some users. That is because the original issue being reported does not really apply today. For the rest, someone else opened another bug ; so I will mark this one as a duplicate of that one. *** This bug has been marked as a duplicate of bug 333079 *** Great, thanks Dawit, yes just got a chance to test that here (Kubuntu 14.10) and that is the case here as well - brilliant! |