Package: sylpheed Version: 2.4.5-1 Followup-For: Bug #355192 Hi!
I'm using sylpheed version 2.4.5-1 (which is in testing at present). This bug has been probably fixed (even though I am not quite sure, since haven't yet had the opportunity to see what actually happens when an SSL certificate expires), but it could be considered as "overfixed" in a sense... I'll try to better explain what I mean. When I start Sylpheed and get my mail, Sylpheed complains loudly and explicitly asks me to accept or reject the SSL certificate, whenever it is self-signed or signed by an unrecognized issuer... On successive mail downloads, no further complaining is done, until I quit Sylpheed. Next time I start Sylpheed, there goes again: | The SSL certificate of mail.example.org cannot be verified by the | following reason: | unable to get local issuer certificate [...] | Do you accept this certificate? | | [ Cancel ] [ OK ] I click on OK one more time, but Sylpheed fails to remember my decision. Another reason for failure may be: "self signed certificate". When I saw this behavior for the first time, I thought: "well, there will be a menu option to manage certificates somewhere, and clicking on the OK button will surely insert the SSL certificate into the list of permanently accepted ones: everything's fine and Sylpheed won't complain again until the certificate expires!". Unfortunately, what I expected did not prove true and now I'm here hitting OK at every certificate for each Sylpheed session... That's why I say that the bug I originally reported seems to be "overfixed": the version in sarge silently accepted even expired certificates, the version in current testing complains for every little certificate flaw and does not allow me to permanently accept a certificate... BTW, I see the following stderr messages on my terminal: (sylpheed:3910): LibSylph-WARNING **: mail.example.org: SSL certificate verify failed (20: unable to get local issuer certificate) (sylpheed:3910): LibSylph-WARNING **: pop3s.foo.org: SSL certificate verify failed (20: unable to get local issuer certificate) (sylpheed:3910): LibSylph-WARNING **: pops.bar.org: SSL certificate verify failed (18: self signed certificate) Please retitle the bug report, if appropriate, and forward to upstream the polite request to implement a certificate management system (similar to those typically found in web browsers). Thanks. -- System Information: Debian Release: lenny/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 2.6.21-2-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages sylpheed depends on: ii libaspell15 0.60.5-1 GNU Aspell spell-checker runtime l ii libatk1.0-0 1.18.0-2 The ATK accessibility toolkit ii libbluetooth2 3.11-1 Library to use the BlueZ Linux Blu ii libc6 2.6.1-1 GNU C Library: Shared libraries ii libcairo2 1.4.10-1+b2 The Cairo 2D vector graphics libra ii libcompfaceg1 1:1.5.2-4 Compress/decompress images for mai ii libfontconfig1 2.4.2-1.2 generic font configuration library ii libfreetype6 2.3.5-1+b1 FreeType 2 font engine, shared lib ii libglib2.0-0 2.14.0-2 The GLib library of C routines ii libgpg-error0 1.4-2 library for common error values an ii libgpgme11 1.1.5-1 GPGME - GnuPG Made Easy ii libgtk2.0-0 2.10.13-1 The GTK+ graphical user interface ii libgtkspell0 2.0.10-3+b1 a spell-checking addon for GTK's T ii libldap2 2.1.30.dfsg-13.5 OpenLDAP libraries ii libonig2 5.9.0-0.1 Oniguruma regular expressions libr ii libpango1.0-0 1.18.1-1 Layout and rendering of internatio ii libpisock9 0.12.2-10 library for communicating with a P ii libpng12-0 1.2.15~beta5-2 PNG library - runtime ii libssl0.9.8 0.9.8e-6 SSL shared libraries ii libusb-0.1-4 2:0.1.12-7 userspace USB programming library ii libx11-6 2:1.0.3-7 X11 client-side library ii libxcursor1 1:1.1.9-1 X cursor management library ii libxext6 1:1.0.3-2 X11 miscellaneous extension librar ii libxfixes3 1:4.0.3-2 X11 miscellaneous 'fixes' extensio ii libxi6 2:1.1.3-1 X11 Input extension library ii libxinerama1 1:1.0.2-1 X11 Xinerama extension library ii libxrandr2 2:1.2.2-1 X11 RandR extension library ii libxrender1 1:0.9.3-1 X Rendering Extension client libra ii zlib1g 1:1.2.3.3.dfsg-5 compression library - runtime Versions of packages sylpheed recommends: ii aspell-en [aspell-dic 6.0-0-5.1 English dictionary for GNU Aspell ii aspell-it [aspell-dic 0.60.20060723ds1-1 The Italian dictionary for GNU Asp pn claws-mail-tools <none> (no description available) ii metamail 2.7-53 implementation of MIME ii sylpheed-i18n 2.4.5-1 Locale data for Sylpheed (i18n sup ii xfonts-100dpi 1:1.0.0-4 100 dpi fonts for X ii xfonts-75dpi 1:1.0.0-4 75 dpi fonts for X -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
