Bug 752982 - boring accept-ssl-certicate question on every start
Summary: boring accept-ssl-certicate question on every start
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: evolution
Version: 16
Hardware: i686
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Matthew Barnes
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-11-10 22:39 UTC by Heiko Adams
Modified: 2011-11-24 10:30 UTC (History)
3 users (show)

Fixed In Version: evolution-3.3.2
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-11-24 10:30:18 UTC
Type: ---


Attachments (Terms of Use)

Description Heiko Adams 2011-11-10 22:39:43 UTC
Description of problem:
I'm using POP3 and TLS to fetch my mails. But on every start evolution asks me to accept the ssl-certicate and this going to be boring all over the time.

Version-Release number of selected component (if applicable):
evolution-3.2.1-2.fc16.i686

How reproducible:
allways

Steps to Reproduce:
1. start evolution
2. configure your mail accounts to use ssl encryption
3. restart evolution
  
Actual results:
Evolution asks on every start if I want to accept the ssl certicate

Expected results:
Evolution should ask once and save my decision until the certicate changes.

Additional info:

Comment 1 Matthew Barnes 2011-11-10 23:08:09 UTC
Sounds like a bad or expired certificate.

Were the certificate valid it wouldn't do that.

Comment 2 Heiko Adams 2011-11-10 23:25:52 UTC
That's a possibility but as I wrote it would be enough if evolution asks one time if I accept that certicate until the cert changes again.

Comment 3 Milan Crha 2011-11-11 07:18:49 UTC
I noticed similar behaviour with IMAP account too, but it cured on its own after some time, without anything being changed from my side. I guess there is something with the nss database, which prevents it from updating, or something with folder ~/.camel_certs ?

Comment 4 Heiko Adams 2011-11-11 12:14:50 UTC
So if you're right, deleting ~/.camel_certs should solve this problem?

Comment 5 Milan Crha 2011-11-14 08:42:26 UTC
I wouldn't delete that folder, you can always try with renaming it to something else with closed evolution. As I said, the issue disappeared for an unknown reason to me on its own after some time. I would like to know what fixed it, but I do not. Maybe I run older evolution, which saved the cert properly, and then the newer was able to use it. I'll retest this later and let you know, though I would prefer to see this bug filled in Gnome's bugzilla, because Fedora package doesn't have any change in this area from the upstream code.

Comment 6 Milan Crha 2011-11-14 13:47:52 UTC
I renamed my ~/.camel_certs, then run evolution and I received a prompt about bad certificate. I pressed OK, then the folder was created and the certificate was stored there. The next start evolution didn't claim on the bad certificate any more.

I also noticed a warning on console of evolution:
   camel-WARNING **: Could not load cert /home/mcrha/.camel_certs/cert-id:
   Failed to open file '/home/mcrha/.camel_certs/cert-id': No such file or
   directory
Which makes sense, the folder was renamed.

To answer your question from comment #4: yes, please, rename the ~/.camel_certs and run evolution, whether it'll create and save the certificate into the folder. It would be good to run evolution from console, to see any warnings it may claim (I would try with the old ~/.camel_certs too, and fix an issue it'll claim about - I suppose it'll claim the reason there).

Comment 7 Heiko Adams 2011-11-14 14:02:20 UTC
The Problem seems to be solved after renaming ~/.camel_certs an restarting evolution.

Comment 8 Milan Crha 2011-11-14 16:31:22 UTC
Does the previous folder or inner file have set attributes preventing write to it or an ownership is not correct after restore from backup or anything, please? It would be good to know what was wrong with the folder or its content before closing this bug report.

Comment 9 Heiko Adams 2011-11-23 19:13:21 UTC
I'm sorry but I can't tell you because i deleted the folder instead of renaming

Comment 10 Milan Crha 2011-11-24 10:30:18 UTC
OK, no problem. I made some changes upstream, which made sure the certificate database is saved as soon as the dialog about bad certificate is finished, thus any later crash or anything will not do an issue, just the opposite. This is part of 3.3.2 of evolution/evolution-data-server.


Note You need to log in before you can comment on or make changes to this bug.