trinity-users@lists.pearsoncomputing.net

Message: previous - next
Month: November 2011

Re: [trinity-users] 3.5.13: konqueror cannot save site certificates

From: "Mag. Dr. Nikolaus Klepp" <office@...>
Date: Tue, 8 Nov 2011 23:56:16 +0100
Am Dienstag, 8. November 2011 schrieb Timothy Pearson:
> > Am Dienstag, 8. November 2011 schrieb David Hare:
> >> On 08/11/11 20:30, Mag. Dr. Nikolaus Klepp wrote:
> >> > Am Dienstag, 8. November 2011 schrieb Greg Madden:
> >> >> On Tuesday 08 November 2011 12:08:38 am Mag. Dr. Nikolaus Klepp
> >>
> >> wrote:
> >> >>> Could somebody please verify this?
> >> >>>
> >> >>> Point konqueror to a site with unknown site certificate, e,g,
> >> >>> http://www.ba-ca.at/
> >> >>>
> >> >>> Now the dialog "server authentication ..." pups up.
> >> >>>
> >> >>> Click on "Continue",
> >> >>>
> >> >>> Next dialog, click on "Permanent".
> >> >>>
> >> >>> Close konqeror. Open it again, point it to the same address. Again
> >>
> >> the
> >>
> >> >>> dialog "server authentication ..." comes up.
> >> >>>
> >> >>>
> >> >>> Nik.
> >> >>
> >> >> FWIW,
> >> >>
> >> >> I get the same behavior you do.
> >> >>
> >> >> Not sure what this means though, if a site does not have a valid
> >>
> >> cert,
> >>
> >> >> can you make it permanent?
> >> >
> >> > I can't make it permanent, that's the problem.
> >>
> >> Popup box in konq here (using ssl.....) :
> >>
> >> "The IP address of the host www.ba-ca.at does not match the one the
> >> certificate was issued to."
> >>
> >> With iceweasel:
> >>
> >> "This Connection is Untrusted"
> >>
> >> so can't be a konqueror-specific issue, maybe it's the other end of the
> >> line?
> >>
> >> Sorry can't check this in M$, gave that up several years back.
> >
> > YOu misunderstand my point: The problem is not that the messagebox "The
> > IP address of the host www.ba-ca.at does not match the one the
> > certificate was
> > issued to." appears. In fact, that's what it is supposed to do. The
> > problem
> > is, that konqueror does not store the certificate so that I do not get
> > that
> > messagebox again.
> >
> > When you click "Continue" on the messagebox, then the next messagebox
> > appears
> > saying:
> >
> > "Would you like to accept this certificate forever without being
> > prompted?"
> >
> > Click "Forever" and close konqueror. At this point the site certificate
> > should
> > have been saved to ~/.trinity/share/config/ksslpolicies - but it is not.
> >
> > Now restart konqueror, go to the same address as before and you get the
> > messagebox "The IP address of the host www.ba-ca.at does not match the
> > one the certificate was issued to." - which should not appear as the site
> > certificate should have been stored in
> > ~/.trinity/share/config/ksslpolicies.
> >
> > This problem is quite anoying, as it appears on all self certified sites
> > and
> > sites.
> >
> > Nik
>
> And I can confirm the bug.  Have you filed a bug report for this?

did it, Bug 594 .


>
> Tim
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
> trinity-users-unsubscribe@... For additional
> commands, e-mail: trinity-users-help@... Read list
> messsages on the Web archive: http://trinity-users.pearsoncomputing.net/
> Please remember not to top-post:
> http://trinity.pearsoncomputing.net/mailing_lists/#top-posting



-- 

Mag. Dr. Nikolaus Klepp
Einnehmerstra├če 14
A-4810 Gmunden
Tel.: +43 650 82 11 724
email: office@...