[Bugs] #4625 Browse HIGH: Certificate installation required for Internet access on SA networks

[Sugar Labs Bugs]

#4625: Certificate installation required for Internet access on SA networks
--------------------------+-------------------------------
  Reporter:  JerryV       |            Owner:
      Type:  defect       |           Status:  new
  Priority:  High         |        Milestone:  Unspecified
 Component:  Browse       |          Version:  Unspecified
  Severity:  Unspecified  |       Resolution:
  Keywords:  AU1B         |  Distribution/OS:  Unspecified
Bug Status:  Unconfirmed  |
--------------------------+-------------------------------
\
\
\
\
\
\

Comment (by godiard):

 Add here a conversation with Matthew:

 I think we need look at this as a opportunity to fix Browse properly.

 While creating a Firefox activity can be a workaround,
 after that, you will find 100 problems.
 Sugarized applications are never perfectly integrated.

 We need understand what is doing Firefox different:
 * Show to the user a dialog and add the user name/password to a database?
 * Store a certificate?
 * Where?
 * There are a file cert8.db?
 * Can we get a certificate file?

 In the directory /home/olpc/Browse.activity/ we have a file cert8.db, and
 in theory Browse is using it.
 I have tried use certutil to install a certificate, like [1]
 using the file SAEDURootCA.cer from http://dev.laptop.org.au/issues/1774
 but tell me "The certificate database is in an old, unsupported format"

 Now, that file can be old or broken, because when I do (in my desktop):

 certutil -d /home/gonzalo/.mozilla/firefox/gbfnonsw.default -L

 I can see a list of installed certificates, but if I do the same in the
 Browse directory get:

 certutil  -d /home/gonzalo/Activities/Browse.activity -L
 certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key
 database is in an old, unsupported format.

 Is possible try copy the firefox cert8.db file to the Browse.activity
 directory and see if that solves the problem?

 If that work, we need see if we can install the needed certificates using
 certutil or something else.

 As you can see, more questions than replies, but I hope this help.

 Gonzalo


 [1] http://www.computer42.org/xwiki-
 static/exported/DevNotes/xwiki.DevNotes.Firefox.html#HProgrammaticimportofCACertificate
\
\
\

--
Ticket URL: <http://bugs.sugarlabs.org/ticket/4625#comment:5>
Sugar Labs <http://sugarlabs.org/>
Sugar Labs bug tracking system