Bug 409850

Summary: SSL errors can block the calling app or Plasma
Product: [Frameworks and Libraries] frameworks-kio Reporter: arne anka <kde-bugs>
Component: HTTPAssignee: David Edmundson <kde>
Status: CONFIRMED ---    
Severity: major CC: kde, kdelibs-bugs, nate, plasma-bugs
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: Debian unstable   
OS: Linux   
Latest Commit: Version Fixed In:
Attachments: screenshot step 2
screenshot step 3

Description arne anka 2019-07-16 08:18:23 UTC
Created attachment 121543 [details]
screenshot step 2

SUMMARY

I have set up Bing's Picture Of The day Wallpaper, which apparently uses an SSL connection.
Recently IT introduced as a security measure sort of MTM to check content, using a local CA.
I installed the CA cert in my system and apparently everything else is happy -- except plasma.

1) an error pops up about SSL
2) I accept the certificate _FOREVER_! (plasma_ssl_error_accepted_forever.png)
3) next day: same error pops up, upon proceeding taskbar gets greyed out and an entry appears "KDE SSL Information - Plasma", and that's it (plasma_error_blocks.png)
4) minimized all windows one after one but that elusive and blocking dialog is nowhere to be found
5) need to kill and restart plasmashell which on top of the hassle messed up my windows setup

Expected:
1) Plasma should use the system certificates
2) Plasma should remember my decision to accept the certificate forever
3) such a dialog should _not_ block the entire shell
4) the dialog _must_ show up
Comment 1 arne anka 2019-07-16 08:19:02 UTC
Created attachment 121544 [details]
screenshot step 3
Comment 2 Nate Graham 2019-07-16 14:42:41 UTC
Seems relevant to the proposed "KDE for Big Enterprise" goal. :)
Comment 3 Kai Uwe Broulik 2019-07-16 14:44:15 UTC
Can you open the image in Gwenview or Dolphin or any other KDE application with or without that warning? To trace whether the issue is in plasma or KIO.
Comment 4 arne anka 2019-07-17 11:12:08 UTC
I don't even know, what URL is used to retrieve the image.
Given previous experiences, I am surprised the host appears in the error message at all ...
Comment 5 arne anka 2019-08-01 09:09:42 UTC
(In reply to Kai Uwe Broulik from comment #3)
> Can you open the image in Gwenview or Dolphin or any other KDE application
> with or without that warning? To trace whether the issue is in plasma or KIO.

Using
> https://www.bing.com/HPImageArchive.aspx?format=js&idx=0&n=1&mkt=de_DE
Gwenview and Dolphin both show the same error.
According to 
System Settings -> Network/Settings -> SSL Preferences -> SSL Signers 
the certificate is there.
Comment 6 arne anka 2019-09-12 08:22:25 UTC
Any progress?