After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 494418 - Certificate validation errors are not displayed to the user
Certificate validation errors are not displayed to the user
Status: RESOLVED WONTFIX
Product: evolution
Classification: Applications
Component: Calendar
2.12.x (obsolete)
Other All
: Normal critical
: ---
Assigned To: evolution-calendar-maintainers
Evolution QA team
Depends on:
Blocks:
 
 
Reported: 2007-11-07 01:39 UTC by Sam Morris
Modified: 2010-08-11 10:04 UTC
See Also:
GNOME target: ---
GNOME version: 2.19/2.20


Description Sam Morris 2007-11-07 01:39:21 UTC 
Please describe the problem:
While seeing if #359574 was still present in Evolution, I discovered that Evolution did not display any kind of indication that the certificate presented by the web server did not verify.

Steps to reproduce:


Actual results:


Expected results:
Evolution *MUST* not talk to a web server if its certificate fails to validate. That is, the certificate must:

 * not have a valid until date earlier than the current date
 * not have a valid from date later than the current date
 * not present a host name (in the CN or dnsname attributes) that does not match the host name that Evolution connected to
 * be possible to create a chain of trust from the CA certificates known to NSS to the certificate presented.
 * probably some other stuff...

Does this happen every time?


Other information:
Comment 1 Matt McCutchen 2009-11-02 15:50:45 UTC 
To clarify for future readers, this bug appears to be about HTTP access to calendars.  SSL/TLS for mail servers uses a different mechanism.

Evolution is actually relying on the default behavior of libsoup.  See bug 543455.
Comment 2 Matt McCutchen 2009-11-02 16:16:45 UTC 
This can be blocked on bug 600447 now.
Comment 3 André Klapper 2010-08-11 10:04:21 UTC 
Bug 600447 is WONTFIX, hence this is WONTFIX too...