Bug 244806

Summary: Startssl certificate not properly imported/not working
Product: [Unmaintained] kio Reporter: Roland Wolters <bugs>
Component: ksslAssignee: Konqueror Developers <konq-bugs>
Status: RESOLVED DUPLICATE    
Severity: normal CC: adawit, heri+kde, matija, wstephenson
Priority: NOR    
Version First Reported In: unspecified   
Target Milestone: ---   
Platform: Fedora RPMs   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:
Attachments: Error on https://fsfe.org

Description Roland Wolters 2010-07-16 01:39:09 UTC 
Version:           unspecified (using KDE 4.4.4) 
OS:                Linux

I use a startssl certificate for my own page: https://www.izom.de
The encryption works with most browsers like Chromium and Firefox, but not with  KDE related programs as Konqueror, rekonq and Kmail with imap.

I imported the CA files from:
http://www.startssl.com/?app=9
Kleopatra stated that they are there - however, I still get the error that in the certificate chain the "StartCom Class 1 Primary Intermediate Server CA" is not trusted. The trusted level is "NO", the reason is:
"NO, there were errors:
The certificate authority's certificate is invalid
The root certificate authority's certificate is not trusted for this purpose"

I have no further idea what to do. Additionally, that might be a good time to finally add StartSSL as a root certificate issuer to KDE's main installation.

Reproducible: Didn't try

Steps to Reproduce:
1. Open Konqueror
2. Enter address: https://www.izom.de


Actual Results:  
An certificate error appears.

Expected Results:  
The page should load without any error.
Comment 1 Matija Šuklje 2011-05-12 14:58:59 UTC 
I get a similar problem with FSFE's websites, XMPP servers, RSS feeds etc.

e.g. https://fsfe.org
Comment 2 Matija Šuklje 2011-05-12 18:38:23 UTC 
Created attachment 59941 [details]
Error on https://fsfe.org

This is the error I get when visiting https://fsfe.org

From FSFE's part I heard that they checked and that their StartSSL certificate is valid and should be OK.
Comment 3 Dawit Alemayehu 2013-12-29 16:18:03 UTC 

*** This bug has been marked as a duplicate of bug 269498 ***
Comment 4 Dennis Schridde 2015-02-03 02:03:57 UTC 
I do not think this is a duplicate of bug #269498. This is about websites secured by startssl certificates, while the other is about login to startssl.
Comment 5 Dennis Schridde 2015-02-03 08:26:30 UTC 
See-Also: https://bugs.kde.org/show_bug.cgi?id=339023