After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 594856 - [REGRESSION] Lack of certificate manager
[REGRESSION] Lack of certificate manager
Status: RESOLVED DUPLICATE of bug 618429
Product: epiphany
Classification: Core
Component: Passwords, Cookies, & Certificates
2.31.x
Other Linux
: Normal critical
: ---
Assigned To: Epiphany Maintainers
Epiphany Maintainers
: 336072 607828 (view as bug list)
Depends on:
Blocks: 542454 542461
 
 
Reported: 2009-09-11 08:31 UTC by Maciej (Matthew) Piechotka
Modified: 2014-09-21 21:30 UTC
See Also:
GNOME target: ---
GNOME version: 2.29/2.30



Description Maciej (Matthew) Piechotka 2009-09-11 08:31:39 UTC
The certificate manager is not working in 2.27.x (up to .92).
Comment 1 Fabio Durán Verdugo 2009-09-11 13:38:22 UTC
could you explain a little better, you mean you do not ask for any certificate, when to do it?
Comment 2 Maciej (Matthew) Piechotka 2009-09-11 18:45:10 UTC
Usually:

Unable to load page

Problem occurred while loading the URL https://xxx/

Connection terminated unexpectedly

If I choose Tools->Manage Certificates nothing happens
Comment 3 Maciej (Matthew) Piechotka 2009-09-11 18:48:22 UTC
On some sites when I try to create certificate:

From website: "An error occurred while processing your request: Your browser did not send us a valid certificate request"
Comment 4 Dan Winship 2009-09-11 18:58:51 UTC
ah, specifically there is no way to configure client certificates.

eg, https://koji.fedoraproject.org/koji/login will give the "connection terminated unexpectedly" error, because the site sends the "client certificate required" flag in its ssl handshake, and we don't provide a cert, so it closes the connection.
Comment 5 Sam Morris 2009-09-28 11:11:32 UTC
Additionally, double-clicking the certificate icon in the status bar does not show the certificate info dialog  box.

Should the certificate manager even be an extension? Being able to view the details of a web site's certificate is an essential feature of any web browser IMO. Without it, there is no way to verify the identity of the web site you are connected to. Seeing that it has been signed by _a_ trusted CA is not very useful when we have so many random CAs and no restriction on what they may sign. It is also essential in order to securely use the 'verified by visa' and 'mastercard securecode' crap that banks are now forcing on end users.
Comment 6 Reinout van Schouwen 2010-01-23 12:41:39 UTC
*** Bug 607828 has been marked as a duplicate of this bug. ***
Comment 7 Reinout van Schouwen 2010-01-23 12:42:22 UTC
Marking NEW per duplicate bug.
Comment 8 Jeremy Nickurak 2010-01-23 16:46:49 UTC
To be clear, is this a bug about epiphany lacking a built-in certificate manager, or about epiphany-extension's certificate manager not working, or both?
Comment 9 Maciej (Matthew) Piechotka 2010-01-24 20:08:44 UTC
(In reply to comment #8)
> To be clear, is this a bug about epiphany lacking a built-in certificate
> manager, or about epiphany-extension's certificate manager not working, or
> both?

I think mostly second one. I don't care how it is implemented as long as it is well integrated (for example fixes bug #542454).
Comment 10 Maciej (Matthew) Piechotka 2010-03-01 22:34:02 UTC
Sorry - could it be blocker for 3.0? I mean - it is really basic element which any other browser has. I would help but unfortunatly I don't have much time recently.
Comment 11 Xan Lopez 2010-03-01 22:45:00 UTC
(In reply to comment #10)
> Sorry - could it be blocker for 3.0? I mean - it is really basic element which
> any other browser has. I would help but unfortunatly I don't have much time
> recently.

Not sure what you are asking here exactly. It can't be a blocker since pretending that any feature done through an extension could be a blocker for the mainline browser makes no sense. If want you want to say is that you'd like us to, worst case, drop everything and fix this before 3.0, well, your vote is noted...
Comment 12 Maciej (Matthew) Piechotka 2010-03-01 22:57:55 UTC
(In reply to comment #11)
> (In reply to comment #10)
> > Sorry - could it be blocker for 3.0? I mean - it is really basic element which
> > any other browser has. I would help but unfortunatly I don't have much time
> > recently.
> 
> Not sure what you are asking here exactly. It can't be a blocker since
> pretending that any feature done through an extension could be a blocker for
> the mainline browser makes no sense.

Hmm. VGA/network is 'blocker' for most kernels even if it they are microkernels and it is done by separate processes ;)

> If want you want to say is that you'd like
> us to, worst case, drop everything and fix this before 3.0, well, your vote is
> noted...

Since 3.0 is in 6 month I think it is possible without 'dropping everything'. I, of course, merly ask/vote for feature (sorry if it sounded otherwise).
Comment 13 Tobias Mueller 2010-03-23 20:03:00 UTC
*** Bug 336072 has been marked as a duplicate of this bug. ***
Comment 14 Jeremy Nickurak 2010-04-16 23:04:02 UTC
I'd suggest that epiphany needs a proper certificate manager without relying on an extension. Having to rely on seperate extension that isn't even distributed in base distributions (Ubuntu puts extensions in universe) is bad enough, but even that doesn't work any more.
Comment 15 Abou Al Montacir 2010-05-14 23:08:33 UTC
We just need that when clickin gon "tools->manage certificates" we can view the certificates and manage them by adding, deleting and editing.

According to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560310 this is an issue in libsoop, could that be confirmed please?
Comment 16 Maciej (Matthew) Piechotka 2010-12-11 16:54:09 UTC
Possibly it should be integrated with gnome-keyring as, if I understend correctly, the certificates are going to be handled globally.
Comment 17 Xan Lopez 2011-01-23 18:35:15 UTC
Seriously, there's no need to list every single release between the start of the regression and the present.
Comment 18 Xan Lopez 2012-08-09 13:20:18 UTC
(In reply to comment #5)
> Additionally, double-clicking the certificate icon in the status bar does not
> show the certificate info dialog  box.
> 

This has been fixed in bug #681506, but for now you can only read the cert. information.
Comment 19 Michael Catanzaro 2014-09-21 21:30:38 UTC
Certificate management is out of scope for Epiphany -- that's what Seahorse is for -- except that we do need to somehow support client-side SSL certificates as mentioned in comment #4.

*** This bug has been marked as a duplicate of bug 618429 ***