bugMail Notification, A mail notification for freedesktop.org-compliant system trays - Bugs: bug #19578, No default CA certificates loaded...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #19578: No default CA certificates loaded for SSL

Submitter:  Peter Clifton <pcjc2>
Submitted:  Wed 11 Apr 2007 06:03:25 PM UTC
   
 
Severity:  4 - Important Status:  Fixed
Privacy:  Public Assigned to:  None
Originator Name:  Open/Closed:  Closed

Tue 26 Jun 2007 12:41:24 PM UTC, comment #2: 

Fixed in 4.1

Jean-Yves Lefort <jylefort>
Group administrator
Wed 11 Apr 2007 07:22:24 PM UTC, comment #1: 

It was pointed out to me by our postmaster, that a call to SSL_CTX_set_default_verify_paths() would work.

I added this in my local copy, in mn_ssl.c, and it did the trick.

Peter Clifton <pcjc2>
Wed 11 Apr 2007 06:03:25 PM UTC, original submission:  

Hi,

mail-notification (as released with Ubuntu Fiesty, version 4.0-rc2) has no initialisation of any CA certificate path with which to verify SSL certificates.

I believe all is needed is an appropriate call to SSL_CTX_load_verify_location(...) would be all that
is needed to fix this. What I don't know, is a secure, automagic compatible way to define what the standard search paths should be.

Sylpheed has some code in libsylph/ssl.c which looks for a configured dir, and if that doesn't exist, falls back to /etc/ssl/certs.

Without this feature, may users will be tempted to accept the certificate, and will be far less secure as a result.
 

Ubuntu actually ships with SSL disabled in mail-notification, making it unusable with my institution's mail server, so I had to re-compile the .deb manually.

Regards,

Peter Clifton

Peter Clifton <pcjc2>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #13087:  patch added by None (809B - application/octet-stream - This little patch implements the fix described earlier.)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by jylefort (Posted a comment)
  • -email is unavailable- added by pcjc2 (Submitted the item)
  •  

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2007-06-26 jylefort StatusNone Fixed
        Open/ClosedOpen Closed
    2007-06-17 None Attached File- Added patch, #13087
    2007-04-11 pcjc2 Carbon-Copy- Added pcjc2

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code