Bug 417008 - Flickr export ERR_CERT_AUTHORITY_INVALID
Summary: Flickr export ERR_CERT_AUTHORITY_INVALID
Status: RESOLVED FIXED
Alias: None
Product: digikam
Classification: Applications
Component: Plugin-WebService-Flickr (show other bugs)
Version: 7.0.0
Platform: Appimage Linux
: NOR normal
Target Milestone: ---
Assignee: Digikam Developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-02-01 00:28 UTC by swizzly
Modified: 2020-02-01 13:49 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In: 7.0.0


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description swizzly 2020-02-01 00:28:22 UTC
SUMMARY
Export to Flickr does not work because of ERR_CERT_AUTHORITY_INVALID error.

STEPS TO REPRODUCE
1. Click on export to flickr
2. The embeded browser pops up with an error message saying: 
"...
https://www.flickr.com might be temporarily down or it may have moved permanently to a new web address.
ERR_CERT_AUTHORITY_INVALID"

OBSERVED RESULT
see above

EXPECTED RESULT
In the pop up browser window the flickr login page should be opened where the user can enter the credentials and go on with the image export.

SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Ubuntu 18.04.3 LTS
(available in About System)
KDE Plasma Version: -
KDE Frameworks Version: -
Qt Version: -
I use it with Gnome 3.28-1

I tried several Appimage versions from the 7.0.0 Series non of them were working. The current one is  digikam-7.0.0-beta3-20200130T131235-x86-64_5172dc1340a9b0a9739737a600d1abad.appimage
Comment 1 Maik Qualmann 2020-02-01 07:00:06 UTC
I cannot reproduce the problem here with a login from Germany, everything works fine. Can you enable debug output (export QT_LOGGING_RULES="digikam*=true") and post the messages from the console?

Maik
Comment 2 Maik Qualmann 2020-02-01 07:04:06 UTC
The error message "ERR_CERT_AUTHORITY_INVALID" is related to SSL in the Chrome browser. I suspect that it could be our old problem with Ubuntu and different SSL versions (System <=> AppImage) again. There are no problems here with openSUSE.

Maik
Comment 3 caulier.gilles 2020-02-01 08:12:22 UTC
Same here from France using AppImage under Mageia6 or 7 : Flickr export tool work as expected

Gilles Caulier
Comment 4 swizzly 2020-02-01 08:22:02 UTC
(In reply to Maik Qualmann from comment #1)
> I cannot reproduce the problem here with a login from Germany, everything
> works fine. Can you enable debug output (export
> QT_LOGGING_RULES="digikam*=true") and post the messages from the console?
> 
> Maik

Hi Maik
I did it, it has the following debug output in the terminal:
unknown: Open Browser... ( QUrl("https://www.flickr.com/services/oauth/authorize?perms=write&oauth_token=72157712924965878-a10791d9f261895f&oauth_callback=https://www.flickr.com") )
[16084:16110:0201/091938.315415:ERROR:nss_util.cc(748)] After loading Root Certs, loaded==false: libnssckbi.so: cannot open shared object file: No such file or directory
[16084:16110:0201/091938.319359:ERROR:cert_verify_proc_nss.cc(969)] CERT_PKIXVerifyCert for www.flickr.com failed err=-8179
[16084:16106:0201/091938.321652:ERROR:ssl_client_socket_impl.cc(941)] handshake failed; returned -1, SSL error code 1, net_error -202


I have in the Ubuntu 18.04 following openssl version:
dpkg -l | grep openssl
ii  openssl                                                          1.1.1-1ubuntu2.1~18.04.5                            amd64
Comment 5 caulier.gilles 2020-02-01 08:27:59 UTC
Did you have libnssckbi.so on your system ?

I'm surprised that openssl included in AppImage require this, as at AppImage construction, all dependencies are scanned and resolved.

Gilles Caulier
Comment 6 swizzly 2020-02-01 08:58:17 UTC
(In reply to caulier.gilles from comment #5)
> Did you have libnssckbi.so on your system ?
> 
> I'm surprised that openssl included in AppImage require this, as at AppImage
> construction, all dependencies are scanned and resolved.
> 
> Gilles Caulier

Hi Gilles

I have the following:
/usr/lib/x86_64-linux-gnu/libnss3.so
/usr/lib/x86_64-linux-gnu/libnssutil3.so

and

/usr/lib/firefox/libnssckbi.so
/usr/lib/thunderbird/libnssckbi.so
/usr/lib/x86_64-linux-gnu/nss/libnssckbi.so

So I made a link to /usr/lib:
# ln -s /usr/lib/x86_64-linux-gnu/nss/libnssckbi.so /usr/lib/

and now it work :-) 

Many thank!
Comment 7 caulier.gilles 2020-02-01 13:49:34 UTC
I checked in build AppImage script and libnssckbi is not in the blacklist of file removed from the bundle. So if this library is not present in the appimage bundle, this want mean that library is not required at DK compilation time.

So if this file is missing when you run DK appimage, it's an external dependency not solved or broken from your system.

I close this file now.

Gilles Caulier