You have been subscribed to a public bug:

I'm testing a new soon-to-be released scope for the phone that feeds
Dash / Music with popular online music; the scope pulls data from a few
remote scopes on the Smart Scopes Server. There seems to be problem with
loading icons from one of them due to a certifcate validation error;
this leads to missing icons in the Dash. This error occurs *only* on the
phone, I don't have it with unity8 running on the desktop nor in unity7.
This makes me think a CA certificate is missing on the phone, or perhaps
SSL is configured slightly different.

When this happens, ~/.cache/upstart/unity8.logs says:
file:///usr/share/unity8/Dash/Music/AlbumTile.qml:35:16: QML QQuickImage: SSL 
handshake failed

Since the new scope hasn't been released yet, it's easiest to reproduce
it with just wget:

1) Use web browser to get some search results from the Smart Scopes
Server: https://productsearch.ubuntu.com/smartscopes/v1/search?q=&scopes
=more_suggestions-populartracks.scope

2) Pick one of the "icon_hint" values and wget it on the phone:
wget -d 
https://3rdpartymedia.ubuntuone.com/7digital/static/img/sleeveart/00/019/465/0001946517_350.jpg

It will give the following:

Resolving 3rdpartymedia.ubuntuone.com (3rdpartymedia.ubuntuone.com)... 
91.189.92.23, 91.189.92.24
Caching 3rdpartymedia.ubuntuone.com => 91.189.92.23 91.189.92.24
Connecting to 3rdpartymedia.ubuntuone.com 
(3rdpartymedia.ubuntuone.com)|91.189.92.23|:443... connected.
Created socket 3.
Releasing 0x01d35bb8 (new refcount 1).
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x01d36c68
certificate:
  subject: /OU=Domain Control Validated/CN=3rdpartymedia.ubuntuone.com
  issuer:  /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, 
Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure 
Certification Authority/serialNumber=07969287
ERROR: cannot verify 3rdpartymedia.ubuntuone.com's certificate, issued by 
‘/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, 
Inc./OU=http://certificates.godaddy.com/repository/CN=Go Daddy Secure 
Certification Authority/serialNumber=07969287’:
  Unable to locally verify the issuer's authority.
To connect to 3rdpartymedia.ubuntuone.com insecurely, use 
`--no-check-certificate'.
Closed 3/SSL 0x01d36c68

** Affects: unity8 (Ubuntu)
     Importance: High
     Assignee: Simon Davy (bloodearnest)
         Status: Fix Released

-- 
Some icons fail to load due to a problem with SSL certificate
https://bugs.launchpad.net/bugs/1233597
You received this bug notification because you are a member of Ubuntu Bugs, 
which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to