Bug 442912

Summary:	Image Wallpaper can become inaccessible when using APOD POTD plugin when a certificate in the chain has expired
Product:	[Plasma] plasmashell	Reporter:	Andrei Rybak <rybak.a.v>
Component:	Picture of the Day wallpaper	Assignee:	Guo Yunhe <i>
Status:	REPORTED ---
Severity:	normal	CC:	i, nate, plasma-bugs, qydwhotmail
Priority:	NOR
Version:	5.27.2
Target Milestone:	1.0
Platform:	Neon
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:
Attachments:	Certificate error -- main window Certificate error -- details Certificate error -- issuer for chain asd.gsfc.nasa.gov Certificate error -- issuer for chain R3 Video recording -- "Change Wallpaper..." button does not work second video recording

Description Andrei Rybak 2021-09-24 22:34:59 UTC

SUMMARY
Picture of the Day for NASA's APOD (https://apod.nasa.gov/) has got an expired certificate, which breaks Changing Wallpaper in System Settings, if you have APOD enabled as the wallpaper.

STEPS TO REPRODUCE
1. Have Wallpaper set to Picture of the Day with NASA APOD selected
2. Wait until NASA certificate expires -- upgrade the root certificates (Ubuntu package certificates-ca) so that the NASA's certificate is no longer accepted.
3. Wain until you receive an error message about certificate (responsible for apod.nasa.gov) expiring. (See screenshots) // I assume this is because "Picture of the Day" wallpaper mode periodically checks the website for updates. Every five minutes, I guess?
4. Open System Settings
5. Click on "Change Wallpaper..." (See video recording)

OBSERVED RESULT
At Step 5 __nothing__ happens.

EXPECTED RESULT
At Step 5 the GUI for changing wallpapers is opened in the "System Settings" window.

SOFTWARE/OS VERSIONS
Operating System: KDE neon 5.22
KDE Plasma Version: 5.22.5
KDE Frameworks Version: 5.86.0
Qt Version: 5.15.3
Kernel Version: 5.11.0-36-generic (64-bit)
Graphics Platform: X11
Processors: 8 × Intel® Core™ i5-8250U CPU @ 1.60GHz
Memory: 7.7 GiB of RAM
Graphics Processor: Mesa Intel® UHD Graphics 620

ADDITIONAL INFORMATION
* The suspicion that the problem is with the NASA certificate has only occurred because *just before* I've started getting this error, I upgraded using `aptitude` and the package "ca-certificates" caught my eye in the list of upgraded packages and I manually checked its changelog in aptitude (hotkey "C").
** The package's changelog is available at http://changelogs.ubuntu.com/changelogs/pool/main/c/ca-certificates/ca-certificates_20210119ubuntu0.21.04.1/changelog
** The change of that upgrade is the latest entry in the changelog:

   >  [ Dimitri John Ledkov ]
   >  * mozilla/blacklist.txt: blacklist expired "DST Root CA X3".
   >    (LP: #1944481)
   >
   > -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 22 Sep 2021 07:46:54 -0400

* I checked that the website "apod.nasa.gov" corresponds to the host "antwrp.gsfc.nasa.gov"

      $ ping apod.nasa.gov | head -1
      PING apod.nasa.gov(antwrp.gsfc.nasa.gov (2001:4d0:2310:150::22)) 56 data bytes

Comment 1 Andrei Rybak 2021-09-24 22:35:34 UTC

Created attachment 141884 [details]
Certificate error -- main window

Comment 2 Andrei Rybak 2021-09-24 22:36:07 UTC

Created attachment 141885 [details]
Certificate error -- details

Comment 3 Andrei Rybak 2021-09-24 22:36:52 UTC

Created attachment 141886 [details]
Certificate error -- issuer for chain asd.gsfc.nasa.gov

Comment 4 Andrei Rybak 2021-09-24 22:37:15 UTC

Created attachment 141887 [details]
Certificate error -- issuer for chain R3

Comment 5 Andrei Rybak 2021-09-24 22:38:10 UTC

Created attachment 141888 [details]
Video recording -- "Change Wallpaper..." button does not work

Comment 6 Andrei Rybak 2021-09-24 22:41:41 UTC

The attached video recording demonstrates the 5th step of "STEPS TO REPRODUCE" and the observed result of the button "Change Wallpaper..." not working as expected.

The attached screenshot show the relevant information in the error dialog about the expired certificate. I've highlighted the relevant bits of information on the screenshots.

Comment 7 Andrei Rybak 2021-09-24 22:43:41 UTC

> The attached screenshot show [..]

I mean "screenshots", in plural, here. There are four screenshots with different windows and tabs open.

Comment 8 Andrei Rybak 2021-09-24 23:31:19 UTC

I have managed to find a BAD workaround:

  1. Backup files '~/.config/plasma-org.kde.plasma.desktop-appletsrc' and '~/.config/kscreenlockerrc (1)'.
  2. Delete the originals of these files.
  3. Restart plasmashell via "killall plasmashell; kstart5 plasmashell"
  4. Open "System Settings"
  5. Click "Change Wallpaper..." and it works.

But this is obviously suboptimal -- I lost all my Plasma settings in the process. I could not figure out which parts of the file 'plasma-org.kde.plasma.desktop-appletsrc' are responsible for this. Partial removal of lines with "wallpaper" and "potd" in them doesn't help.

Comment 9 Andrei Rybak 2021-09-24 23:46:48 UTC

The root cause of this bug could be in "kdeplasma-addons/Picture of the Day" (https://bugs.kde.org/enter_bug.cgi?product=kdeplasma-addons&component=Picture%20of%20the%20Day). However, even if "Picture of the Day" is broken, I feel that button "Change Wallpaper..." in System Settings shouldn't break because an underlying addon is broken.

Comment 10 Andrei Rybak 2021-09-25 00:53:58 UTC

Found a much better workaround. There is another way of getting to the wallpaper settings, which isn't broken:

  1. Right click on the desktop
  2. Click on "Configure Desktop and Wallpaper..."

Comment 11 Nate Graham 2021-09-27 21:44:00 UTC

Does it work if you right-click on the desktop and choose "Configure Desktop and Wallpaper?"

Comment 12 Andrei Rybak 2021-09-27 22:48:51 UTC

Created attachment 141966 [details]
second video recording

Nate Graham, please Comment 10 https://bugs.kde.org/show_bug.cgi?id=442912#c10

If I right-click on the desktop and choose "Configure Desktop and Wallpaper", the expected window appears. But inside that dialog, switching to the "Wallpaper Type: Picture of the Day" and "Provider: Astronomy (NASA)" leads to the same exact Server Authentication error as described above and demonstrated on the screenshots.

If I use this workaround and switch to a non-broken "Wallpaper Type", then in "System Settings" > "Quick Settings", the button "Change Wallpaper..." is unfortunately still broken. (See second video recording)

Comment 13 Andrei Rybak 2021-09-27 22:57:47 UTC

Side note: the NASA APOD wallpaper that is visible in the second video recording is just a cached locally picture from 25 September 2021: https://apod.nasa.gov/apod/ap210925.html

Comment 14 Andrei Rybak 2021-09-27 22:59:43 UTC

(In reply to Andrei Rybak from comment #13)
> recording is just a cached locally picture from 25 September 2021:
> https://apod.nasa.gov/apod/ap210925.html

That's of course is supposed to be 24 September: https://apod.nasa.gov/apod/ap210924.html