bugMail Notification, A mail notification for freedesktop.org-compliant system trays - Bugs: bug #19578, No default CA certificates loaded...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #19578: No default CA certificates loaded for SSL

Submitted by:  Peter Clifton <pcjc2>
Submitted on:  Wed 11 Apr 2007 06:03:25 PM UTC  
 
Severity: 4 - ImportantStatus: Fixed
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Closed

Tue 26 Jun 2007 12:41:24 PM UTC, comment #2:

Fixed in 4.1

Jean-Yves Lefort <jylefort>
Project Administrator
Wed 11 Apr 2007 07:22:24 PM UTC, comment #1:

It was pointed out to me by our postmaster, that a call to SSL_CTX_set_default_verify_paths() would work.

I added this in my local copy, in mn_ssl.c, and it did the trick.

Peter Clifton <pcjc2>
Wed 11 Apr 2007 06:03:25 PM UTC, original submission:

Hi,

mail-notification (as released with Ubuntu Fiesty, version 4.0-rc2) has no initialisation of any CA certificate path with which to verify SSL certificates.

I believe all is needed is an appropriate call to SSL_CTX_load_verify_location(...) would be all that
is needed to fix this. What I don't know, is a secure, automagic compatible way to define what the standard search paths should be.

Sylpheed has some code in libsylph/ssl.c which looks for a configured dir, and if that doesn't exist, falls back to /etc/ssl/certs.

Without this feature, may users will be tempted to accept the certificate, and will be far less secure as a result.

Ubuntu actually ships with SSL disabled in mail-notification, making it unusable with my institution's mail server, so I had to re-compile the .deb manually.

Regards,

Peter Clifton

Peter Clifton <pcjc2>

 

Attached Files
file #13087:  patch added by None (809B - application/octet-stream - This little patch implements the fix described earlier.)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by jylefort (Posted a comment)
  • -unavailable- added by pcjc2 (Submitted the item)
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 26 Jun 2007 12:41:24 PM UTCjylefortStatusNone=>Fixed
      Open/ClosedOpen=>Closed
    Sun 17 Jun 2007 09:10:24 PM UTCNoneAttached File-=>Added patch, #13087
    Wed 11 Apr 2007 06:03:25 PM UTCpcjc2Carbon-Copy-=>Added pcjc2

    Back to the top


    Powered by Savane 3.1-cleanup1