Bug 2124998

Summary: Failed verification of certificate
Product: [Fedora] Fedora Reporter: almaak
Component: AusweisApp2Assignee: Björn Esser (besser82) <besser82>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 36CC: belegdol, besser82
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-09-11 09:52:46 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Error screen none

Description almaak 2022-09-07 16:53:43 UTC 
Created attachment 1910276 [details]
Error screen

Description of problem:

Failed verification of certificate, probably D-TRUST CA 2-2 EV 2016

Version-Release number of selected component (if applicable):

AusweisApp2-data-1.22.3-1.fc36.noarch
AusweisApp2-1.22.3-1.fc36.x86_64

How reproducible:

Install AusweisApp2 either with rpm or dnf. Try to see personal data

Steps to Reproduce:
1. Open AusweisApp2
2. Click on See my personal data

Actual results:

https://www.autentapp.de
An unknown network error has occured during the connection to the provider. 

See details -> Workflow_preverification_error -> Pre-verification failed.

Expected results:

Connect with provider and be able to access my id card details.

Additional info:

Log excerpt:

network    2022.09.07 18:36:21.400 14718 I ...SslHandshakeDone(workflows/base/states/StateGenericSendReceive.cpp:110) : Used peer certificate: QSslCertificate("3", "74:ce:fd:83:93:52:da:5a:2a:0e:39:35:9c:00:ae:e7", "La6+dWJjNmnRa33ZTRkSaw==", "D-TRUST CA 2-2 EV 2016", "prod.governikus-eid.de", QMap((1, "prodpaos.governikus-eid.de")(1, "prod2.governikus-eid.de")(1, "prod2paos.governikus-eid.de")(1, "prod3.governikus-eid.de")(1, "prod3paos.governikus-eid.de")(1, "prod4.governikus-eid.de")(1, "prod4paos.governikus-eid.de")(1, "prod.governikus-eid.de")), QDateTime(2022-06-14 08:13:14.000 UTC Qt::UTC), QDateTime(2023-06-17 08:13:14.000 UTC Qt::UTC))
network    2022.09.07 18:36:21.400 14718 I ...SslHandshakeDone(workflows/base/states/StateGenericSendReceive.cpp:110) : Used ssl session: "65d3a6205acedbde2fe6294e2086f1321b1bbe44381d8e121d4a8ace3d9b5a14"
network    2022.09.07 18:36:21.400 14718 I ...SslHandshakeDone(workflows/base/states/StateGenericSendReceive.cpp:110) : Handshake of tls connection done!
network    2022.09.07 18:36:21.800 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Status Code: 200 "OK"
network    2022.09.07 18:36:21.800 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Header | Connection: keep-alive
network    2022.09.07 18:36:21.800 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Header | Content-Type: application/vnd.paos+xml
network    2022.09.07 18:36:21.800 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Header | Content-Length: 8511
network    2022.09.07 18:36:21.800 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Header | Content-Security-Policy: default-src 'self'
network    2022.09.07 18:36:21.800 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Header | Date: Wed, 07 Sep 2022 16:36:21 GMT
card       2022.09.07 18:36:21.840 14718 C SignatureChecker::check(card/base/asn1/SignatureChecker.cpp:47)            : Certificate verification failed: "DECVCAeID00102"
default    2022.09.07 18:36:21.840 14718 C ...PreVerification::run(workflows/base/states/StatePreVerification.cpp:74) : Pre-verification failed: signature check failed
network    2022.09.07 18:36:22.255 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Status Code: 200 "OK"
network    2022.09.07 18:36:22.256 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Header | Connection: keep-alive
network    2022.09.07 18:36:22.256 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Header | Content-Type: application/vnd.paos+xml
network    2022.09.07 18:36:22.256 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Header | Content-Length: 1185
network    2022.09.07 18:36:22.256 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Header | Content-Security-Policy: default-src 'self'
network    2022.09.07 18:36:22.256 14718   ...:onReplyFinished(workflows/base/states/StateGenericSendReceive.cpp:276) : Header | Date: Wed, 07 Sep 2022 16:36:22 GMT
Comment 1 Julian Sikorski 2022-09-11 09:48:54 UTC 
Still happens with 1.24.1.
Comment 2 Julian Sikorski 2022-09-11 09:52:46 UTC 

*** This bug has been marked as a duplicate of bug 2105754 ***