#880907 Automatically accept certificate signed by specific CA

Package:
claws-mail
Source:
claws-mail
Description:
Fast, lightweight and user-friendly GTK based email client
Submitter:
Sven Bartscher
Date:
2017-11-11 17:54:14 UTC
Severity:
wishlist
#880907#5
Date:
2017-11-05 14:44:44 UTC
From:
To:
As discussed in #608344 claws-mail has an account option to
automatically accept certificates signed by CAs in
/etc/ssl/certs/ca-certificates.crt.

For some accounts I would like to configure a specific CA certificate
(or a set of certificates) by which the server certificate has to be
signed to be automatically accepted. This is useful for cases in which
the CA in question is not in the globally trusted CAs or you want to
narrow down what CAs are valid for that specific account.

Currently claws-mail does not seem to have such an option, but it
would be great if it would be added in a future version.

Regards
Sven

- -- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8), LANGUAGE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages claws-mail depends on:
ii  libatk1.0-0          2.26.0-2
ii  libc6                2.24-17
ii  libcairo2            1.15.8-2
ii  libcompfaceg1        1:1.5.2-5+b2
ii  libcurl3-gnutls      7.56.1-1
ii  libdb5.3             5.3.28-13.1
ii  libenchant1c2a       1.6.0-11.1
ii  libetpan20           1.8.0-1
ii  libexpat1            2.2.3-1
ii  libfontconfig1       2.12.3-0.2
ii  libfreetype6         2.8.1-0.1
ii  libgdk-pixbuf2.0-0   2.36.11-1
ii  libglib2.0-0         2.54.1-1
ii  libgnutls30          3.5.16-1
ii  libgtk2.0-0          2.24.31-2
ii  libice6              2:1.0.9-2
ii  libldap-2.4-2        2.4.45+dfsg-1
ii  liblockfile1         1.14-1+b1
ii  libpango-1.0-0       1.40.12-1
ii  libpangocairo-1.0-0  1.40.12-1
ii  libpangoft2-1.0-0    1.40.12-1
ii  libpisock9           0.12.5-dfsg-2+b3
ii  librsvg2-2           2.40.18-2
ii  libsasl2-2           2.1.27~101-g0780600+dfsg-3
ii  libsm6               2:1.2.2-1+b3
ii  xdg-utils            1.1.2-1
ii  zlib1g               1:1.2.8.dfsg-5

Versions of packages claws-mail recommends:
ii  aspell-de [aspell-dictionary]       20161207-1
ii  aspell-de-1901 [aspell-dictionary]  1:2-31
ii  aspell-en [aspell-dictionary]       2017.08.24-0-0.1
ii  claws-mail-i18n                     3.15.1-1
ii  xfonts-100dpi                       1:1.0.4+nmu1
ii  xfonts-75dpi                        1:1.0.4+nmu1

Versions of packages claws-mail suggests:
ii  chromium [www-browser]  61.0.3163.100-2
pn  claws-mail-doc          <none>
pn  claws-mail-tools        <none>
ii  firefox [www-browser]   56.0-2
ii  lynx [www-browser]      2.8.9dev16-1
ii  mousepad                0.4.0-4

- -- no debconf information
-----BEGIN PGP SIGNATURE-----
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=O9e1
-----END PGP SIGNATURE-----

#880907#10
Date:
2017-11-11 17:45:05 UTC
From:
To:
control: forwarded -1 http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3914

Hi Sven,

Indeed, could be useful to some people, forwarded upstream.

best regards,