Bug 2580 - Excessive Changed SSL Certificate dialogs + frozen GUI
Summary: Excessive Changed SSL Certificate dialogs + frozen GUI
Status: RESOLVED WORKSFORME
Alias: None
Product: Claws Mail (GTK 2)
Classification: Unclassified
Component: Other (show other bugs)
Version: 3.7.6
Hardware: PC Linux
: P3 normal
Assignee: users
URL:
Depends on:
Blocks:
 
Reported: 2012-01-15 12:27 UTC by Mark Summerfield
Modified: 2015-04-14 13:34 UTC (History)
1 user (show)

See Also:


Attachments

Description Mark Summerfield 2012-01-15 12:27:19 UTC
For the past 3 days I have had "Changed SSL Certificate" dialogs every 5 mins (i.e., every time Claws tries to retieve emails from googlemail).

(1) If I click the Accept and save button after more than a minute or so, the GUI freezes and I have to use xkill & restart claws.

(2) If I click the Accept and save button quickly enough everything seems to work. But after 3 days of having this happening all the time it is very aggravating.

Couldn't there be an option "Automatically accept changed SSL certificates if the signature status is correct", either globally or per account?

Thanks.

PS I'm using Debian 6 which is why my claws is a bit old.
Comment 1 Paul 2012-01-15 14:25:26 UTC
There is an option, skip_ssl_cert_check, see http://www.claws-mail.org/manual/claws-mail-manual.html#adv_hidden

about gmail and certs, see http://lists.claws-mail.org/pipermail/users/2012-January/001096.html
Comment 2 Paul 2012-01-15 14:35:05 UTC
I attempted to reproduce the GUI freeze. I waited 8 minutes, but there was no freeze.
Comment 3 Mark Summerfield 2012-01-16 08:58:55 UTC
I changed the clawsrc file as suggested and that seems to have worked. It worries me a bit that this is a global change. I wish it was more fine-grained, e.g., for a specific site, or at the very least only applied when the certificate's signature is valid.
Comment 4 Hugh Hyatt 2013-03-25 14:41:36 UTC
I started having this same problem recently, with GoDaddy servers.  The work-around described here is just that: a work-around, not a solution.
Comment 5 matkoniecz 2015-04-03 15:29:53 UTC
Disabling verification of SSL certificates as a proper solution? Is it some kind of joke?
Comment 6 Colin Leroy 2015-04-03 15:46:38 UTC
Newer versions of Claws-Mail now have a per account SSL option named
"Automatically accept unknown valid SSL certificates".

This is what you want there rather than skipping verification.
Comment 7 matkoniecz 2015-04-14 13:34:08 UTC
Thanks, that solution works properly.

Note You need to log in before you can comment on or make changes to this bug.