After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 600445 - Provide UI to manage mail server SSL/TLS certificates (camel-cert.db)
Provide UI to manage mail server SSL/TLS certificates (camel-cert.db)
Status: RESOLVED WONTFIX
Product: evolution
Classification: Applications
Component: Mailer
2.26.x (obsolete)
Other Linux
: Normal enhancement
: ---
Assigned To: evolution-mail-maintainers
Evolution QA team
: 453233 606208 (view as bug list)
Depends on:
Blocks:
 
 
Reported: 2009-11-02 16:00 UTC by Matt McCutchen
Modified: 2014-04-14 00:47 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
Screenshot of Evolution and PSM certificate managers (185.72 KB, image/png)
2010-01-30 05:01 UTC, Matt McCutchen
Details
Simple tool to edit camel-cert.db (2.56 KB, text/plain)
2013-05-03 03:20 UTC, Matt McCutchen
Details

Description Matt McCutchen 2009-11-02 16:00:59 UTC
Evolution has no UI to manage the mail server SSL/TLS certificates stored in ~/.evolution/camel-cert.db .  If I want to reverse a previous decision to accept a certificate, I am left to excise the certificate from camel-cert.db using a hex editor.  That's ridiculous.

In general, the camel-cert.db system seems really weak.  I would suggest dropping it and extending the system for mail user certificates (which is on the "Certificates" panel of the preferences and appears to use Mozilla PSM) to cover mail server certificates too.
Comment 2 Sam Morris 2010-01-06 15:21:31 UTC
*** Bug 606208 has been marked as a duplicate of this bug. ***
Comment 3 Matt McCutchen 2010-01-30 05:01:45 UTC
Created attachment 152617 [details]
Screenshot of Evolution and PSM certificate managers

(In reply to comment #0)
> the system for mail user certificates (which is on
> the "Certificates" panel of the preferences and appears to use Mozilla PSM)

Upon closer inspection, the Evolution certificate manager doesn't actually use PSM; it is a separate implementation made to look like PSM (see the attached screenshot).  That's silly.  Evolution should use the standard certificate manager for GNOME (if there isn't one, there should be one).  I may enter another bug to pursue this.
Comment 4 André Klapper 2012-06-16 11:47:45 UTC
*** Bug 453233 has been marked as a duplicate of this bug. ***
Comment 5 Matt McCutchen 2013-05-03 03:20:05 UTC
Created attachment 243135 [details]
Simple tool to edit camel-cert.db

I ran into a problem with my camel-cert.db again today (I rejected a certificate permanently by mistake and had no way to change my decision) and wrote a simple tool to edit the file.  I hope people find this useful in the absence of proper support in Evolution.
Comment 6 Matthew Barnes 2013-09-05 01:43:05 UTC
This is planned for Seahorse.  Closing.
Comment 7 Matt McCutchen 2014-04-14 00:47:06 UTC
I just edited my camel-cert.db again: my mail server changed certificate and I wanted to remove the old one.

Is there any evidence (e.g., a bug) of the plan to add the feature to Seahorse?  If not, please reopen this bug.