trinity-users@lists.pearsoncomputing.net

Message: previous - next
Month: November 2012

Re: 3.5.13: konqueror cannot save site certificates

From: Nick Leverton <nick@...>
Date: Thu, 1 Nov 2012 22:50:16 +0000 (UTC)
In article <201111081951.18196.office@...>,
Mag. Dr. Nikolaus Klepp <trinity-users@...> wrote:
>Am Dienstag, 8. November 2011 schrieb David Hare:
>> On 08/11/11 16:35, Mag. Dr. Nikolaus Klepp wrote:
>> > Am Dienstag, 8. November 2011 schrieb Werner Joss:
>> >> On Tuesday 08 November 2011 10:08:38 Mag. Dr. Nikolaus Klepp wrote:
>> >>> Could somebody please verify this?
>> >>>
>> >>> Point konqueror to a site with unknown site certificate, e,g,
>> >>> http://www.ba-ca.at/
>> >>>
>> >>> Now the dialog "server authentication ..." pups up.
>> >>>
>> >>> Click on "Continue",
>> >>>
>> >>> Next dialog, click on "Permanent".
>> >>>
>> >>> Close konqeror. Open it again, point it to the same address. Again the
>> >>> dialog "server authentication ..." comes up.
>> >>
>> >> I had this problem frequently with 3.5.12, it went away after update to
>> >> 3.5.13 - are you sure your konqueror is up-to-date ?
>> >>
>> >> werner
>> >
>> > defintly 3.5.13. it's reproduceable with david's live-cd from
>> > http://exe-linux.fastfishwebsolutions.com/tde/
>> >
>> > nik
>>
>> Strange I can't reproduce that with either the live-cd or my normal
>> installations....
>>   trying the url you mention, konq just opens it normally (except it
>> wants flash if not present)
>>
>> But check them out here: http://www.digicert.com/help/
>> I get 2 different results in different iceweasel tabs, one is ok, one
>> says "Certificate does not match name"
>>
>> David
>>
>
>Sorry, I missed an "s". The test-URL is https://www.ba-ca.at/ 
>Could you please retry?

Just tidying up my mailbox - I have checked this on 3.5.15.1 and it
happens for me as you descibe.  Base OS is Debian Squeeze+bpo.  Myself I
almost never store permanent exceptions so am not too hard hit by it
(gives me a chance to rightously mutter about folk who haven't noticed
their signer's signer's root certificate was cancelled last year due
to compromise and thus breaking their validity chain), but I hope the
report is still useful.

Nick
-- 
"The Internet, a sort of ersatz counterfeit of real life"
	-- Janet Street-Porter, BBC2, 19th March 1996