[Konversation-devel] [konversation] [Bug 339129] New: konversation rejects a valid SSL certificate from a trusted CA

[klondike]

https://bugs.kde.org/show_bug.cgi?id=339129

            Bug ID: 339129
           Summary: konversation rejects a valid SSL certificate from a
                    trusted CA
           Product: konversation
           Version: 1.5
          Platform: Gentoo Packages
               URL: https://irc.xiscosoft.es:7000/
                OS: Linux
            Status: UNCONFIRMED
          Severity: major
          Priority: NOR
         Component: protocol
          Assignee: konversation-devel at kde.org
          Reporter: klondike+kde at klondike.es

For my znc IRC bouncer I use a cacert class 3 certificate.

The cacert class 3 is accepted as a valid certificate in both KDE's SSL
settings and openssl's ca's list.

Connecting using https with either firefox, wget and konqueror works
flawlessly, but when using konversation it complains that the certificate is
not signed by a trusted CA despite both the class 3 and the root certificates
provided in the chain are marked as trusted.

Since this is only happening with konversation I think the bug is in its SSL
handling code.

Reproducible: Always

Steps to Reproduce:
1. Add the cacert class 3 CA as a trusted CA
2. connect to irc.xiscosoft.es:7000 using SSL
3. konversation complains the certificate isn't trusted
4. Displaying the certificate chain shows the issue is that the certificate
isn't signed by a trusted CA yet both of the other certificates in the
certificate chain are shown as trusted.

Actual Results:  
SSL connection error, the user is required to accept a bogus warning

Expected Results:  
No SSL error as happens with the other clients

-- 
You are receiving this mail because:
You are the assignee for the bug.