QupZilla does not remember SSL certificate exception

[JHooverman]

Hello,

please try the following:

Step 1. Start QupZilla
Step 2. On start page click on "About QupZilla"
Step 3. On the opened page "https://github.com/nowrep/QupZilla/wiki" click on "Issues"
Step 4. Click on an issue

If I proceed to the step 3 or sometimes 4 I receive the following error message:

SSL Certificate Error!

The page you trying to access has following errors in SSL Certificate:

• Organization: ValiCert, Inc.
• Domain Name: http://www.valicert.com/
• Expiration Date: 00:19:54 Wednesday 26. June 2019
• Error: The root certificate of the certificate chain is self-signed, and untrusted

Would you like to make exception for this certificate?

Step 5. Press Ok
Step 6. Close QupZilla

If I start again with step 1, the same error appears although I made an exception. Are you able to reproduce this behaviour?

I am using the git-version of 11-26-2011.

[nowrep]

Hi,
this error should NEVER appear when browsing through github. As far as I know, there is no content loaded from valicert.com site on github. It's very wierd.

But I fixed saving of this certificate (it won't save, because this certificate was returning cert.isValid() false)

[JHooverman]

Hello,

I have downloaded the latest git version and compiled it, but this error remains. Is there something else I should check?

[nowrep]

Hi,
what problem, showing of this error or impossibility to save certificate exception?
Can you please check your $profile/certificates folder whether new .crt file is created when you click OK on "make an exception" question? And also check terminal output.
Thanks

[JHooverman]

Sorry, I should have been more specific. QupZilla still asks me, if I want to make an exception although I already did it.

Looking into Tools -> Preferences -> Privacy -> SSL Manager shows an entry "http://www.valicert.com/" under CA Authorities Certificates and Local Certificates, but strangely I do not find a corresponding *.crt file in my profile/certificates folder

[nowrep]

Hmmm, can you please send terminal output when saving an exception?

[JHooverman]

It looks like this:

com@puter:~> qupzilla
0 plugins loaded
NetworkManager::addLocalCertificate cannot write to file: "/home/stekoe/.qupzilla/profiles/default/certificates/http://www.valicert.com/.crt"

It is not be a problem of missing permissions regarding the folder /home/jh/.qupzilla/profiles/default/certificates. This one is in my home folder and it has read, write and execute permission - I already checked this.

[nowrep]

Ok, I got it ... wait a second :-)

[JHooverman]

Sorry for keeping you busy with this. I am still getting this message in my terminal window when I try to accept this certificate:

NetworkManager::addLocalCertificate cannot write to file: "/home/stekoe/.qupzilla/profiles/default/certificates/http://www.valicert.com/.crt"

Since I will be away for the next couple of days, I will try it again next weekend.

By the way: You do not have this problem? Will you have to grant this exception as well? I am just curious...

[nowrep]

Did you recompiled? (Just execute make again, it will recompile only one needed file, not the whole app)
Because I have added code to remove all slashes " / " from name, so the path should be
"/home/stekoe/.qupzilla/profiles/default/certificates/http:www.valicert.com.crt" and it should save just fine.

And I am NOT getting this warning, as I said before, it is very weird, you should NOT get this warnings on github site. Are you using AdBlock? But even if I disable AdBlock, I am not getting this warnings.

I am worried about some tracking, XSS, or some other threat (because I don't see any reason why you should access valicert.com from github page, and with self-signed cert(!!)). But ofcourse I might be wrong, judging it only from my experience.

[JHooverman]

Hello,

I just would like to let you know, that SSL certificate is now properly saved as
"/home/stekoe/.qupzilla/profiles/default/certificates/httpwww.valicert.com.crt". Thank you for solving this issue.

What can I do in this case: If I do not want to make an exception for valicert.com, I will have to press when I am asked "Would you like to make exception for this certificate?". But then this question will come up everytime when I enter the page "https://github.com/nowrep/QupZilla/wiki" -> on "Issues".

Is there a way to let QupZilla remember certificates somehow I do not want to make an exception for?

[nowrep]

Well, that's strange, I can't reproduce your issue in Ubuntu 11.10 neither (Qt 4.7.4 and 534.34 webkit).
For now you can block the url from which that certificate is loaded in AdBlock. You can track this url in web inspector on resources tab.

Maybe can you check your CA Certificates? How many certs do you have? (If you need to scroll than it is ok :)