Bug#686327: gnome-online-accounts: ssl handshake broken - even when I activate most certificates

[Michael Biebl]

tags 686327 + moreinfo unreproducible
severity 686327 important
thanks

On 31.08.2012 10:06, Norbert Preining wrote:
> Package: gnome-online-accounts
> Version: 3.4.2-1
> Severity: grave
> Justification: renders package unusable
> 
> Dear all,
> 
> currently gnome-online-accounts is completely unusable. WHat I do and did:
> 
> * first trial to create a google account:
> 	SSL handshake failed
> * search the internet, update-ca-certificates, I actually did:
>   - check mail.google.com, contacts.google.com for the certificate
>     they use, Thawte
>    - activate all the THawte related certificates, plus some others more
>    - run update-ca-certificate (as root)
> * retry acount creation, this time we come to the place where g-o-a
>   shows me the google login page
> * enter google credentials
> * come to the page: allow "GNOME" to access bla bla bla
> * click on "Grant access"
> * And here we go
> 	Error creating account
> 	Error getting identity: SSL handshake failed
> 
> 
> First remark: DOn't tell me to activate ALL certificates, because
> this will break exim smtp delivery (yeah, it is a pain with certificates)
> 
> Second remark: THawte should be enough, and it is accepted
> 
> Third remark: log out and log in to a new gnome session didn't help
> 
> 
> So, to sum up, broken, completely broken.

Can't reproduce your problem here. Creating a Google Account works just
fine here. This might indeed be related due to your local certificate
configuration.
If you run "/usr/lib/gnome-online-accounts/goa-daemon --replace" do you
get any useful log messages related to your problem?

For testing purposes, could you temporarily enable the default set of
Debian certificates. Testing with a fresh user account would be helpful,
too.

I'm downgrading the severity, as the problem is not reproducible, so it
doesn't look like this is a general problem.

Michael


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 900 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20120831/d1625d71/attachment.pgp>