Hello all,

I'm trying to set up calendar synchronization over SSL, however it 
seems that syncevolution on my Nokia N900 is not able to verify the 
server's certificate.

Connecting to the same server via openssl from elsewhere works fine.

On the N900, I do have the maemosec-certman-common-ca package 
installed, and after symlinking /usr/lib/ssl/certs to /etc/certs
/common-ca , wget (on the N900) is correctly able to verify 
certificates.

However, syncevolution isn't.

Judging from the error message, syncevolution seems to use curl:

[INFO] CurlTransport Failure: SSL certificate problem, verify that the CA cert 
is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify 
failed


In order to further track the problem, I ran syncevolution under 
strace, and I noticed that it doesn't apparently even *try* top open CA 
certificate files from anywhere...
(I searched for strings ssl, cert and crt in the strace log, and nothing 
apart from openssl's library name turned up)

I doesn't seem to open any curlrc files either, but just to be sure, I 
tried adding the following into /home/user/.curlrc :

--capath = /etc/certs/common-ca

... but that didn't help either.

Unfortunately, there is no longer a command-line curl client on the 
N900, which I could use to tell whether this is a problem with libcurl 
or with syncevolution itself...

Nokia-N900-51-1:~# dpkg -l syncevolution | cat
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Cfg-files/Unpacked/Failed-cfg/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name                                                Version                 
                   Description
+++-===================================================-==========================================-==================================================
ii  syncevolution                                       1:1.1.99.6-1            
                   SyncEvolution - a SyncML and CalDAV/CardDAV client

Any ideas?

Thanks,

Alain
_______________________________________________
SyncEvolution mailing list
[email protected]
http://lists.syncevolution.org/listinfo/syncevolution

Reply via email to