Comment 9 for bug 551811

buzzdee (sebastia) wrote :

I meant just a small comment in the Totd entry like: If you want to verify your server certificate you have to enable it in the Preferences -> Network -> certificates ...
For a more detailed explanation how it works, an entry in the FAQ should be added, or we will only have a FAQ entry.

However, with a clean svn checkout running on Linux, the certificate gets installed, and it is used, and certificate check works.

Using the binary, I now get the following exception on startup:

Hook prefsInitHook failed: 1
error copying "/home/user/Desktop/Coccinella-0.96.19Linux-x86/certificates/cacerts.pem": no such file or directory
    while executing
"file copy [file join $this(appPath) certificates cacerts.pem] $jprefs(tls,cafile)"
    (procedure "::PrefNet::InitPrefsHook" line 23)
    invoked from within
"::PrefNet::InitPrefsHook"
    ("eval" body line 1)
    invoked from within
"eval $func $args"
error copying "/home/user/Desktop/Coccinella-0.96.19Linux-x86/certificates/cacerts.pem": no such file or directory
    while executing
"file copy [file join $this(appPath) certificates cacerts.pem] $jprefs(tls,cafile)"
    (procedure "::PrefNet::InitPrefsHook" line 23)
    invoked from within
"::PrefNet::InitPrefsHook"
    ("eval" body line 1)
    invoked from within
"eval $func $args"

I can dismiss it, and coccinella starts up fine afterwards.

The directory /home/user/Desktop/Coccinella-0.96.19Linux-x86 is the directory where I extracted the downloaded binary.

When I put the certificate in place in /home/user/.coccinella/certificates/cacerts.pem, and then restart coccinella, the error doesn't show up as expected, but then on login, I get an error that the certificate cannot be checked:
SSL channel "sock16": error: certificate verify failed
SSL channel "sock16": error: certificate verify failed
The tcltls package I use here on Linux x86_64 (installed opensuse rpm) is tls-1.6-5.42, on OpenBSD I use tcltls-1.5.0p2 installed from ports. The tcltls binary that is included with coccinella is version 1.4.
Sander, this may also be the problem why it did not worked for you when you tried it, I guess we probably need to update the tcltls binary to a more recent version.

My guess is that on Windows I'll run into the same problem. Will hopefully have time today in the evening to test.