#532220 konqueror: SSL in Konqueror (4.2.2) broken, instantly forgets root-certs

Package:
konqueror
Source:
konqueror
Description:
advanced file manager, web browser and document viewer
Submitter:
Moritz Molle
Date:
2010-03-18 17:09:11 UTC
Severity:
important
Tags:
#532220#5
Date:
2009-06-07 15:38:23 UTC
From:
To:
A Blog I read recently began to offer https. The root-CA-cert which
it's ssl-cert uses is not installed in konqueror by default. You get
it at cacert.org.

I clicked at 'download' for the Class 1 PEM 'root.crt' file.
(Disappointingly Konqueror didn't ask me, if I wanted to import that
cert)

Then, I went to 'configure Konqueror' -> 'crypto' -> 'ssl-signers' and
imported the file. The cert was displayed in the cert-list. But it
didn't work. The Blog's (lawblog.de) ssl-cert is not recognized. When
I checked the ssl-signers list in 'configure konqueror' the cacert
entry was gone.

reproducible: every time

I migrated my kde3 preferences to kde4 with what debian offered me, so
I thought 'maybe that's the problem', and deleted the kssl*
configuration and the konqueror configuration under
~/.kde/share/apps/konqueror, but to no success.

Severity 'important', because of breakage of a security aspect.

greetz