[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: konqueror and CA-certificates



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday 01 March 2002 09:54 am, Hendrik Sattler wrote:
> Am Freitag, 1. März 2002 01:54 schrieb Andreas Goesele:
> > Hi,
> >
> > if I want to load a CA-certificate into Netscape or galeon I just open
> > a link to that certificate (application/x-x509-ca-cert, file ending
> > crt) and Netscape/galeon automatically start a process in which I can
> > accept this certificate.
> >
> > How would I do that in Konqueror (2.2.2)? Is it possible? I thought I
> > could do it with Crypto -> Your certificates -> Import, but firstly
> > that doesn't accept non-local certificates and if I download one and
> > open it locally Konqueror asks for "the" certificate password, which I
> > do not know. (Maybe this Import serves another purpose altogether - in
> > the Konqueror manual there is no explanation.)
>
> Sure, you need the pass. Normally you only have certificated of servers you
> visited at least once (with Konq. or Kmail or whatever). Then it simply
> asks you, if you want ot accept it. What sense does it make to do that
> manually?

You misunderstood.  The main problem is that konqueror does not support "3rd 
party CA-certs" without jumping though a *lot* of hoops.  This is on the 
konqueror security guy's todo list, but afaik, has not been addressed yet.  
Maybe somebody running beta2 can inform us differently.  *Because* it doesn't 
permenetly accept the certificates, each time you hit the website (or mail 
server for pops), it asks *again* if you want to accept it, even if you 
select "Forever".  This is a known bug, and unfortunetly not one with a good 
work around.

- -- 
D.A.Bishop
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8f+vWEHLN/FXAbC0RAt3SAJ9bj8nLej2Vmd2Zc1NZQ6eQkUZCcgCfYpaI
WMI2J7WFfVH2c2J31fwveoA=
=gbjY
-----END PGP SIGNATURE-----



Reply to: