Bug 409850 - SSL errors can block the calling app or Plasma
Summary: SSL errors can block the calling app or Plasma
Status: CONFIRMED
Alias: None
Product: frameworks-kio
Classification: Frameworks and Libraries
Component: HTTP (show other bugs)
Version: unspecified
Platform: Debian unstable Linux
: NOR major
Target Milestone: ---
Assignee: David Edmundson
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-07-16 08:18 UTC by arne anka
Modified: 2023-04-27 18:40 UTC (History)
4 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments
screenshot step 2 (13.50 KB, image/png)
2019-07-16 08:18 UTC, arne anka
Details
screenshot step 3 (11.17 KB, image/png)
2019-07-16 08:19 UTC, arne anka
Details

Note You need to log in before you can comment on or make changes to this bug.
Description arne anka 2019-07-16 08:18:23 UTC
Created attachment 121543 [details]
screenshot step 2

SUMMARY

I have set up Bing's Picture Of The day Wallpaper, which apparently uses an SSL connection.
Recently IT introduced as a security measure sort of MTM to check content, using a local CA.
I installed the CA cert in my system and apparently everything else is happy -- except plasma.

1) an error pops up about SSL
2) I accept the certificate _FOREVER_! (plasma_ssl_error_accepted_forever.png)
3) next day: same error pops up, upon proceeding taskbar gets greyed out and an entry appears "KDE SSL Information - Plasma", and that's it (plasma_error_blocks.png)
4) minimized all windows one after one but that elusive and blocking dialog is nowhere to be found
5) need to kill and restart plasmashell which on top of the hassle messed up my windows setup

Expected:
1) Plasma should use the system certificates
2) Plasma should remember my decision to accept the certificate forever
3) such a dialog should _not_ block the entire shell
4) the dialog _must_ show up
Comment 1 arne anka 2019-07-16 08:19:02 UTC
Created attachment 121544 [details]
screenshot step 3
Comment 2 Nate Graham 2019-07-16 14:42:41 UTC
Seems relevant to the proposed "KDE for Big Enterprise" goal. :)
Comment 3 Kai Uwe Broulik 2019-07-16 14:44:15 UTC
Can you open the image in Gwenview or Dolphin or any other KDE application with or without that warning? To trace whether the issue is in plasma or KIO.
Comment 4 arne anka 2019-07-17 11:12:08 UTC
I don't even know, what URL is used to retrieve the image.
Given previous experiences, I am surprised the host appears in the error message at all ...
Comment 5 arne anka 2019-08-01 09:09:42 UTC
(In reply to Kai Uwe Broulik from comment #3)
> Can you open the image in Gwenview or Dolphin or any other KDE application
> with or without that warning? To trace whether the issue is in plasma or KIO.

Using
> https://www.bing.com/HPImageArchive.aspx?format=js&idx=0&n=1&mkt=de_DE
Gwenview and Dolphin both show the same error.
According to 
System Settings -> Network/Settings -> SSL Preferences -> SSL Signers 
the certificate is there.
Comment 6 arne anka 2019-09-12 08:22:25 UTC
Any progress?