{"action":"created","issue":{"url":"https://api.github.com/repos/owncloud/client/issues/2979","labels_url":"https://api.github.com/repos/owncloud/client/issues/2979/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/client/issues/2979/comments","events_url":"https://api.github.com/repos/owncloud/client/issues/2979/events","html_url":"https://github.com/owncloud/client/issues/2979","id":62611395,"number":2979,"title":"Debian Wheezy owncloud-client 1.8.0 fails certificate check","user":{"login":"boltronics","id":250531,"avatar_url":"https://avatars.githubusercontent.com/u/250531?v=3","gravatar_id":"","url":"https://api.github.com/users/boltronics","html_url":"https://github.com/boltronics","followers_url":"https://api.github.com/users/boltronics/followers","following_url":"https://api.github.com/users/boltronics/following{/other_user}","gists_url":"https://api.github.com/users/boltronics/gists{/gist_id}","starred_url":"https://api.github.com/users/boltronics/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/boltronics/subscriptions","organizations_url":"https://api.github.com/users/boltronics/orgs","repos_url":"https://api.github.com/users/boltronics/repos","events_url":"https://api.github.com/users/boltronics/events{/privacy}","received_events_url":"https://api.github.com/users/boltronics/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-03-18T07:18:02Z","updated_at":"2015-03-19T07:15:07Z","closed_at":null,"body":"I just upgraded the client from 1.7.1 to 1.8.0 via the official ownCloud repository:\r\n```\r\ndeb http://download.opensuse.org/repositories/isv:/ownCloud:/desktop/Debian_7.0/ /\r\n```\r\n\r\nNow when I open ownCloud, I get the pop-up:\r\n\r\n```\r\nWarnings about current SSL Connection:\r\nThe issuer certificate of a locally looked up certificate could not be found\r\nThe root CA certificate is not trusted for this purpose\r\nwith Certificate StartCom Class 2 Primary Intermediate Server CA\r\nOrganization: StartCom Ltd.\r\nUnit: Secure Digital Certificate Signing\r\nCountry: IL\r\nFingerprint (MD5): 35:60:c6:d7:6a:78:ce:1e:e8:12:6c:5f:80:b9:d5:04\r\nFingerprint (SHA1): a1:ac:e4:04:6b:6e:33:22:32:b8:7e:cf:b6:f3:7a:07:63:72:01:47\r\n\r\nEffective Date: Wed Oct 24 20:57:09 2007\r\nExpiration Date: Tue Oct 24 20:57:09 2017\r\nIssuer: StartCom Certification Authority\r\nOrganization: StartCom Ltd.\r\nUnit: Secure Digital Certificate Signing\r\nCountry: IL\r\n```\r\n\r\nThis is the relevant part of the client log:\r\n```\r\n03-18 14:30:06:006 0x210f630 !!! OCC::CheckServerJob created for  QUrl( \"https://owncloud.systemsaviour.com/\" )  querying \"status.php\" \r\n03-18 14:30:07:877 0x210f630 FolderMan: Syncing is disabled, no scheduling. \r\n03-18 14:30:08:063 0x210f630 SslHandshakeFailedError:  \"SSL handshake failed\"  : can be caused by a webserver wanting SSL client certificates \r\n03-18 14:30:08:064 0x210f630 void OCC::AbstractNetworkJob::slotFinished() 6 \"SSL handshake failed\" \r\n03-18 14:30:08:064 0x210f630 AccountState connection status change:  \"Undefined\" -> \"Status not found\" \r\n03-18 14:30:08:064 0x210f630 AccountState state change:  \"Disconnected\" -> \"NetworkError\" \r\n03-18 14:30:08:064 0x210f630 Disabling sync scheduler, terminating sync \r\n03-18 14:30:08:065 0x210f630 error: status.php replied  0 \"\" \r\n03-18 14:30:09:906 0x210f630 Client is on latest version! \r\n03-18 14:30:11:685 0x210f630 Saving  0  unknown certs. \r\n03-18 14:30:11:686 0x210f630 void OCC::SyncJournalDb::close() \"/home/abolte/ownCloud/.csync_journal.db\" \r\n03-18 14:30:11:686 0x210f630 No database Transaction to commit \r\n03-18 14:30:11:686 0x210f630 SocketApi:  dtor \r\nowncloud.log (END)\r\n```\r\n\r\nHere are the results of the certificate installation test:\r\nhttps://www.sslshopper.com/ssl-checker.html?host=owncloud.systemsaviour.com#hostname=owncloud.systemsaviour.com\r\n\r\nI can confirm the fingerprints do match my CA-provided intermediate certificate (startcom-sub.class2.server.ca.pem). I run Apache, and have the following certificates defined:\r\n\r\n```\r\nSSLCertificateFile /certpath/systemsaviour.com.crt\r\nSSLCertificateKeyFile /certpath/systemsaviour.com.key\r\nSSLCertificateChainFile /certpath/startcom-sub.class2.server.ca.pem\r\nSSLCACertificateFile /certpath/startcom-ca.pem\r\n```\r\n\r\n```apache2ctl -t``` says ```Syntax OK```, which is expected since the problem only started happening after receiving the owncloud-client update. Evidentially, the ownCloud client is not detecting the certificate referenced by the SSLCACertificateFile directive - but I would think it should be using the locally installed certificates anyway? I don't have any certificate issues browsing the owncloud installation in either Chromium or Firefox."},"comment":{"url":"https://api.github.com/repos/owncloud/client/issues/comments/83377547","html_url":"https://github.com/owncloud/client/issues/2979#issuecomment-83377547","issue_url":"https://api.github.com/repos/owncloud/client/issues/2979","id":83377547,"user":{"login":"dragotin","id":1070214,"avatar_url":"https://avatars.githubusercontent.com/u/1070214?v=3","gravatar_id":"","url":"https://api.github.com/users/dragotin","html_url":"https://github.com/dragotin","followers_url":"https://api.github.com/users/dragotin/followers","following_url":"https://api.github.com/users/dragotin/following{/other_user}","gists_url":"https://api.github.com/users/dragotin/gists{/gist_id}","starred_url":"https://api.github.com/users/dragotin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dragotin/subscriptions","organizations_url":"https://api.github.com/users/dragotin/orgs","repos_url":"https://api.github.com/users/dragotin/repos","events_url":"https://api.github.com/users/dragotin/events{/privacy}","received_events_url":"https://api.github.com/users/dragotin/received_events","type":"User","site_admin":false},"created_at":"2015-03-19T07:15:07Z","updated_at":"2015-03-19T07:15:07Z","body":"@danimo pls"}}