Bug 442912 - Image Wallpaper can become inaccessible when using APOD POTD plugin when a certificate in the chain has expired
Summary: Image Wallpaper can become inaccessible when using APOD POTD plugin when a ce...
Status: REPORTED
Alias: None
Product: plasmashell
Classification: Plasma
Component: Picture of the Day wallpaper (show other bugs)
Version: 5.27.2
Platform: Neon Linux
: NOR normal
Target Milestone: 1.0
Assignee: Guo Yunhe
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-09-24 22:34 UTC by Andrei Rybak
Modified: 2025-03-15 07:17 UTC (History)
4 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments
Certificate error -- main window (26.79 KB, image/png)
2021-09-24 22:35 UTC, Andrei Rybak
Details
Certificate error -- details (93.07 KB, image/png)
2021-09-24 22:36 UTC, Andrei Rybak
Details
Certificate error -- issuer for chain asd.gsfc.nasa.gov (92.90 KB, image/png)
2021-09-24 22:36 UTC, Andrei Rybak
Details
Certificate error -- issuer for chain R3 (89.40 KB, image/png)
2021-09-24 22:37 UTC, Andrei Rybak
Details
Video recording -- "Change Wallpaper..." button does not work (359.28 KB, video/mp4)
2021-09-24 22:38 UTC, Andrei Rybak
Details
second video recording (1.50 MB, video/mp4)
2021-09-27 22:48 UTC, Andrei Rybak
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Andrei Rybak 2021-09-24 22:34:59 UTC
SUMMARY
Picture of the Day for NASA's APOD (https://apod.nasa.gov/) has got an expired certificate, which breaks Changing Wallpaper in System Settings, if you have APOD enabled as the wallpaper.

STEPS TO REPRODUCE
1. Have Wallpaper set to Picture of the Day with NASA APOD selected
2. Wait until NASA certificate expires -- upgrade the root certificates (Ubuntu package certificates-ca) so that the NASA's certificate is no longer accepted.
3. Wain until you receive an error message about certificate (responsible for apod.nasa.gov) expiring. (See screenshots) // I assume this is because "Picture of the Day" wallpaper mode periodically checks the website for updates. Every five minutes, I guess?
4. Open System Settings
5. Click on "Change Wallpaper..." (See video recording)

OBSERVED RESULT
At Step 5 __nothing__ happens.

EXPECTED RESULT
At Step 5 the GUI for changing wallpapers is opened in the "System Settings" window.

SOFTWARE/OS VERSIONS
Operating System: KDE neon 5.22
KDE Plasma Version: 5.22.5
KDE Frameworks Version: 5.86.0
Qt Version: 5.15.3
Kernel Version: 5.11.0-36-generic (64-bit)
Graphics Platform: X11
Processors: 8 × Intel® Core™ i5-8250U CPU @ 1.60GHz
Memory: 7.7 GiB of RAM
Graphics Processor: Mesa Intel® UHD Graphics 620

ADDITIONAL INFORMATION
* The suspicion that the problem is with the NASA certificate has only occurred because *just before* I've started getting this error, I upgraded using `aptitude` and the package "ca-certificates" caught my eye in the list of upgraded packages and I manually checked its changelog in aptitude (hotkey "C").
** The package's changelog is available at http://changelogs.ubuntu.com/changelogs/pool/main/c/ca-certificates/ca-certificates_20210119ubuntu0.21.04.1/changelog
** The change of that upgrade is the latest entry in the changelog:

   >  [ Dimitri John Ledkov ]
   >  * mozilla/blacklist.txt: blacklist expired "DST Root CA X3".
   >    (LP: #1944481)
   >
   > -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 22 Sep 2021 07:46:54 -0400

* I checked that the website "apod.nasa.gov" corresponds to the host "antwrp.gsfc.nasa.gov"

      $ ping apod.nasa.gov | head -1
      PING apod.nasa.gov(antwrp.gsfc.nasa.gov (2001:4d0:2310:150::22)) 56 data bytes
Comment 1 Andrei Rybak 2021-09-24 22:35:34 UTC
Created attachment 141884 [details]
Certificate error -- main window
Comment 2 Andrei Rybak 2021-09-24 22:36:07 UTC
Created attachment 141885 [details]
Certificate error -- details
Comment 3 Andrei Rybak 2021-09-24 22:36:52 UTC
Created attachment 141886 [details]
Certificate error -- issuer for chain asd.gsfc.nasa.gov
Comment 4 Andrei Rybak 2021-09-24 22:37:15 UTC
Created attachment 141887 [details]
Certificate error -- issuer for chain R3
Comment 5 Andrei Rybak 2021-09-24 22:38:10 UTC
Created attachment 141888 [details]
Video recording -- "Change Wallpaper..." button does not work
Comment 6 Andrei Rybak 2021-09-24 22:41:41 UTC
The attached video recording demonstrates the 5th step of "STEPS TO REPRODUCE" and the observed result of the button "Change Wallpaper..." not working as expected.

The attached screenshot show the relevant information in the error dialog about the expired certificate. I've highlighted the relevant bits of information on the screenshots.
Comment 7 Andrei Rybak 2021-09-24 22:43:41 UTC
> The attached screenshot show [..]

I mean "screenshots", in plural, here. There are four screenshots with different windows and tabs open.
Comment 8 Andrei Rybak 2021-09-24 23:31:19 UTC
I have managed to find a BAD workaround:

  1. Backup files '~/.config/plasma-org.kde.plasma.desktop-appletsrc' and '~/.config/kscreenlockerrc (1)'.
  2. Delete the originals of these files.
  3. Restart plasmashell via "killall plasmashell; kstart5 plasmashell"
  4. Open "System Settings"
  5. Click "Change Wallpaper..." and it works.

But this is obviously suboptimal -- I lost all my Plasma settings in the process. I could not figure out which parts of the file 'plasma-org.kde.plasma.desktop-appletsrc' are responsible for this. Partial removal of lines with "wallpaper" and "potd" in them doesn't help.
Comment 9 Andrei Rybak 2021-09-24 23:46:48 UTC
The root cause of this bug could be in "kdeplasma-addons/Picture of the Day" (https://bugs.kde.org/enter_bug.cgi?product=kdeplasma-addons&component=Picture%20of%20the%20Day). However, even if "Picture of the Day" is broken, I feel that button "Change Wallpaper..." in System Settings shouldn't break because an underlying addon is broken.
Comment 10 Andrei Rybak 2021-09-25 00:53:58 UTC
Found a much better workaround. There is another way of getting to the wallpaper settings, which isn't broken:

  1. Right click on the desktop
  2. Click on "Configure Desktop and Wallpaper..."
Comment 11 Nate Graham 2021-09-27 21:44:00 UTC
Does it work if you right-click on the desktop and choose "Configure Desktop and Wallpaper?"
Comment 12 Andrei Rybak 2021-09-27 22:48:51 UTC
Created attachment 141966 [details]
second video recording

Nate Graham, please Comment 10 https://bugs.kde.org/show_bug.cgi?id=442912#c10

If I right-click on the desktop and choose "Configure Desktop and Wallpaper", the expected window appears. But inside that dialog, switching to the "Wallpaper Type: Picture of the Day" and "Provider: Astronomy (NASA)" leads to the same exact Server Authentication error as described above and demonstrated on the screenshots.

If I use this workaround and switch to a non-broken "Wallpaper Type", then in "System Settings" > "Quick Settings", the button "Change Wallpaper..." is unfortunately still broken. (See second video recording)
Comment 13 Andrei Rybak 2021-09-27 22:57:47 UTC
Side note: the NASA APOD wallpaper that is visible in the second video recording is just a cached locally picture from 25 September 2021: https://apod.nasa.gov/apod/ap210925.html
Comment 14 Andrei Rybak 2021-09-27 22:59:43 UTC
(In reply to Andrei Rybak from comment #13)
> recording is just a cached locally picture from 25 September 2021:
> https://apod.nasa.gov/apod/ap210925.html

That's of course is supposed to be 24 September: https://apod.nasa.gov/apod/ap210924.html