registry team mailing list archive

[Tom Helner <ubuntubugs.boog@xxxxxxxxxxxxxxx>]

Here is another workaround solution that can be leveraged until KDE gets
this fixed (https://bugs.kde.org/show_bug.cgi?id=162485), or maybe if
they fix it judging by how long the bug report has been open.

My new SSL cert for uses a chained certificate, and was loading with an
authenticity check warning because "Entrust.net Certification Authority
(2048)" was not included in KDE's ca-bundle.crt. And to add insult to
injury KDE no longer has a GUI to import CA Certificates.

Simply appending the Entrust.net_Premium_2048_Secure_Server_CA.crt
(already installed from the "ca-certificates" package) to KDE's ca-
bundle.crt then restarting KDE fixed this issue for both konqueror and
kmail.

$ sudo cp -p /usr/share/kde4/apps/kssl/ca-bundle.crt /usr/share/kde4/apps/kssl/ca-bundle.crt.orig
$ sudo cat /usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt >> /usr/share/kde4/apps/kssl/ca-bundle.crt
Restart KDE


** Bug watch added: KDE Bug Tracking System #162485
   http://bugs.kde.org/show_bug.cgi?id=162485

** Attachment added: "KDE SSL Information screen shot"
   http://launchpadlibrarian.net/50817321/entrust_2048.png

-- 
KDE doesn't honor root certs chosen by ca-certificates 
https://bugs.launchpad.net/bugs/295266
You received this bug notification because you are a member of Registry
Administrators, which is the registrant for NULL Project.