Re: [Evolution] Evolution and distribution certificate (was: Signature not verified)

[Milan Crha <mcrha redhat com>]

On Sat, 2011-11-26 at 17:31 +0100, Paul Menzel wrote:
> Am Freitag, den 25.11.2011, 13:34 +0100 schrieb Milan Crha:
> That is bad. How does Evolution and the distribution interact? The
> distribution has this updated certificate [1] as you do
>
>         $ openssl x509 -in /etc/ssl/certs/cacert.org.pem -noout -fingerprint
>         SHA1 Fingerprint=13:5C:EC:36:F4:9C:B8:E9:3B:1A:B2:70:CD:80:88:46:76:CE:8F:33
>         $ openssl x509 -in /usr/share/ca-certificates/cacert.org/cacert.org.crt -noout -fingerprint
>         SHA1 Fingerprint=13:5C:EC:36:F4:9C:B8:E9:3B:1A:B2:70:CD:80:88:46:76:CE:8F:33
>
> but in Evolution this is not the case.
>
> > >         CAcert Class 3 Root
> > >         DB:4C:42:69:07:3F:E9:C2:A3:7D:89:0A:5C:1B:18:C4:18:4E:2A:2D
> > >         73:3F:35:54:1D:44:C9:E9:5A:4A:EF:51:AD:03:06:B6
>
> How is that supposed to work? I would have expected Evolution to update
> that automatically.

        Hi,
it is supposed to use the system certificate database, it does for me
with newer nss/nspr and evolution 3.2.x, I suppose. I do not know how
yours 3.0.x should work exactly, I'm sorry. Check [1] and maybe ask
there, as the people CC'ed there know better than me.
        Bye,
        Milan

[1] https://bugzilla.gnome.org/show_bug.cgi?id=585301