Bug 476837

Summary:	Custom Certificates for self-hosted sync server
Product:	[Applications] kasts	Reporter:	regigigas2009 <regigigas2009>
Component:	general	Assignee:	bart
Status:	RESOLVED WORKSFORME
Severity:	normal	CC:	dzwiedziu+bugs.kde.org
Priority:	NOR
Version First Reported In:	23.08.2
Target Milestone:	---
Platform:	Flatpak
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description regigigas2009@live.de 2023-11-11 13:13:52 UTC

SUMMARY
***
I am trying to use Kasts as an Nextcloud-Gpoddersync Client (https://github.com/thrillfall/nextcloud-gpodder), which is using a custom ca.
This CA is imported on the client host in the system CA store (/etc/ssl/certs/ca-certificates.pem).
I cannot get Kasts to connect to my nextcloud instance (https://cloud.lan).
I only get a SSL Handshake error, presumably because it does not know the custom ca.
***


STEPS TO REPRODUCE
1. Host a nextcloud instance with tls encryption 
2. Install Gpoddersync app on the nextcloud instance
3. Install flatpak app: flatpak install org.kde.kasts
4. Try to add gpoddersync server to kasts via https url

OBSERVED RESULT
SSL Handshake error when trying to login to the sync server from Kasts.

EXPECTED RESULT
Successfull login, or at least no SSL Error.

SOFTWARE/OS VERSIONS
Windows: -
macOS: -
Linux/KDE Plasma: Linux Mint Cinnamon 21.x (latest)
(available in About System)
KDE Plasma Version: -
KDE Frameworks Version: -
Qt Version: -
Flatpak Version: 1.12.7
Flatpak App Version: 23.08.2 (stable)

ADDITIONAL INFORMATION
I tried the snap store variant.
Tried to mount/link /etc/ssl on the snap core folder in /snap/corexxx/current/etc/ssl.
Tried the command sudo flatpak override org.kde.kasts --filesystem=/etc/ssl/
Nothing seems to work.
There does not seem much information to adding custom certificates to snap/flatpak or its apps from the client.

Comment 1 Dźwiedziu 2024-10-02 18:56:10 UTC

Should self-signed certificates problems (essentially the cert is ignored as here) be tracked in this or a separate ticket?

Comment 2 bart 2024-11-10 17:49:36 UTC

Do you still get these errors?

BTW, locally CA certificates should just work on distro packaged versions or self-compiled versions.  With things like snap and flatpak, you are very likely looking at container issues rather than app issues.

Comment 3 Bug Janitor Service 2024-11-25 03:46:25 UTC

🐛🧹 ⚠️ This bug has been in NEEDSINFO status with no change for at least 15 days. Please provide the requested information, then set the bug status to REPORTED. If there is no change for at least 30 days, it will be automatically closed as RESOLVED WORKSFORME.

For more information about our bug triaging procedures, please read https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging.

Thank you for helping us make KDE software even better for everyone!

Comment 4 Bug Janitor Service 2024-12-10 03:46:38 UTC

🐛🧹 This bug has been in NEEDSINFO status with no change for at least 30 days. Closing as RESOLVED WORKSFORME.