[Evolution] Bug#616587: Bug#616587: Bug#616587: Bug#616587: Bug#616587: evolution: SSL certificate warning, but openssl and gnutls have no problem with the certificate

[Josh Triplett]

On Sun, Mar 06, 2011 at 11:50:06PM +0100, Yves-Alexis Perez wrote:
> On Sun, 2011-03-06 at 23:17 +0100, Yves-Alexis Perez wrote:
> > On Sun, 2011-03-06 at 13:07 -0800, Josh Triplett wrote:
> > > > > I see that evolution 2.32.2-1 had this changelog entry:
> > > > >   * debian/patches:
> > > > >     - 02_let-nss-search-for-nssckbi, 03_correctly-init-nss and
> > > > >       04_login-to-nss-on-demand dropped, included upstream.
> > > > > 
> > > > > A quick check of the source confirms that evolution still tries to
> > > > > search for libnssckbi itself, so the functionality of
> > > > > 02_let-nss-search-for-nssckbi did not get included upstream.
> > > > 
> > > > Sounds fishy, it's worth trying with a more recent nss.
> > > 
> > > Already done, no change.  I think the problem exists in evolution, as it
> > > did before with the previous bug reports. 
> > 
> > Ok, i'll dig in evolution sources. What puzzles me is that it /seems/ to
> > work fine here (at least I don't have an empty CA store).
> 
> Could you try packages on
> http://molly.corsac.net/~corsac/debian/evolution/ ?
> 
> I've re-integrated the patch, please confirm it fixes the problem for
> you.

I upgraded evolution, evolution-common, and libevolution to those
packages, but that didn't fix the problem, and strace still shows only
this one attempt to open libnssckbi:

10634 open("/home/josh/.pki/nssdb/libnssckbi.so", O_RDONLY) = -1 ENOENT (No such file or directory)

- Josh Triplett