Bug 335994 - Cannot reject invalid SSL certificate for IMAP server as dialog keeps appearing
Summary: Cannot reject invalid SSL certificate for IMAP server as dialog keeps appearing
Status: RESOLVED UNMAINTAINED
Alias: None
Product: kdepim
Classification: Applications
Component: libkdepim (show other bugs)
Version: unspecified
Platform: Debian testing Linux
: NOR major
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-06-09 11:00 UTC by Jim Scadden
Modified: 2017-01-07 22:42 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments
kdepimlibs_tlscancelled.patch (993 bytes, patch)
2014-06-09 11:02 UTC, Jim Scadden
Details
kdepim-runtime_tlscancelled.patch (738 bytes, patch)
2014-06-09 11:03 UTC, Jim Scadden
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Jim Scadden 2014-06-09 11:00:43 UTC
Forwarded from Debian BTS https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750995

When connecting to an IMAP server over SSL, if the server has an invalid certificate then the user cannot cancel the connection as the dialog keeps reappearing

Reproducible: Always

Steps to Reproduce:
1. Connect to an IMAP server which has an invalid SSL certificate
2. When the dialog advising of the invalid SSL certificate appears, select the Cancel option

Actual Results:  
The dialog reappears

Expected Results:  
The dialog does not re-appear and the connection is aborted
Comment 1 Jim Scadden 2014-06-09 11:02:28 UTC
Created attachment 87085 [details]
kdepimlibs_tlscancelled.patch

Adds new error code ERR_SSL_FAILED to kimap
Comment 2 Jim Scadden 2014-06-09 11:03:36 UTC
Created attachment 87086 [details]
kdepim-runtime_tlscancelled.patch

Adds handling of ERR_SSL_FAILED to kdepim-runtime
Comment 3 Jim Scadden 2014-06-09 11:07:41 UTC
The cause AFAICT is that kdepimlibs does not provide a separate error code for the scenario and so kdepim-runtime does not handle it correctly.

The above patches change the behaviour so that if the user cancels the connection then it is marked as 'broken'. Unfortunately I couldn't find a way to present the dialog which is used when the username/password is rejected (which provides a button which links to the account settings). The patches do however solve the problem of the endless loop which effectively forces the user to accept the invalid certificate at present.
Comment 4 Denis Kurz 2016-09-24 21:00:17 UTC
This bug has only been reported for versions before 4.14, which have been unsupported for at least two years now. Can anyone tell if this bug still present?

If noone confirms this bug for a Framework-based version of kdepim (version 5.0 or later, as part of KDE Applications 15.08 or later), it gets closed in about three months.
Comment 5 Denis Kurz 2017-01-07 22:42:21 UTC
Just as announced in my last comment, I close this bug. If you encounter it again in a recent version (at least 5.0 aka 15.08), please open a new one unless it already exists. Thank you for all your input.