Followup-For: Bug #837177 Control: tags -1 - newcomer [ Removing the tag newcomer which is meant for easy bugs with a known solution, see https://www.debian.org/Bugs/Developer#tags ]
Summary: I could reproduce this, but since yesterday it's working again *without* updating icedove itself. Possible upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=497488 @mudongliang, can you confirm this? I could reproduce this for the mentioned feed [1]. And also the feed [2] stopped updating here on/after 2016-08-18 when I updated to 1:45.2.0-4+b1. If I tried to add these URLs as new feeds in icedove I got "The feed URL could not be found. Please check the name and try again." [1] https://linux.cn/rss.xml [2] https://twigserial.wordpress.com/feed/ Other feeds still worked. The problematic feeds seem to have problems with the certificate in common (firefox says "This website does not supply identity information."). But not all https feeds were affected. Last week I still could reproduce this in 1:45.3.0-1. However at the same time for a new user on the same machine adding those feeds worked. Since yesterday everything works as expected again. I verified this using a backup of ~/.icedove from last month with both 1:45.3.0-1 and 1:45.4.0-1. Maybe related: 1.) On Oct 1 2016 I upgraded openssl 1.0.2h-1 -> 1.0.2j-1. 2.) I think the general issue is being worked on in https://bugzilla.mozilla.org/show_bug.cgi?id=497488 (RSS feeds with an invalid certificate fail with a misleading 'url could not be found' error, work if a certificate security exception is added manually). 2a) I failed to get it working by adding a certificate security exception. But (in hindsight) I assume this failed because I removed each and every certificate for servers and authorities in icedove before (while working on this bug, so this wasn't the original reason for my problems). So the following might have worked: First I saved the wordpress certificate from firefox and imported it in icedove: Preferences - Advanced - Certificates - View Certificates - Servers - Import Then I tried: Preferences - Advanced - Certificates - View Certificates - Servers - Add Exception... Add Security Exception: Location: https://twigserial.wordpress.com/feed/ - Get certificate Then I got (not surprisingly in hindsight) "The certificate is not trusted because it hasn't been verified as issued by a trusted authority using a secure signature." - Add exception 2b) Initially I also failed to get it working with the patches in the upstream bugreport (attachment 8795001 and 8795020, newer versions available in the meantime). But I still lacked the authority certificates at that time. Further I needed to refresh them which might have gone wrong. After readding the authority certificate http://pki.google.com/GIAG2.crt (and maybe also http://g.symcb.com/crls/gtglobal.crl) yesterday my patched icedove worked. Following this I tested with an old, previously broken, backup of ~/.icedove and icedove 1:45.2.0-4+b1. This combination failed in the past, but worked now. So here the bug isn't found anymore, yet the exact solution or further todo is unknown. Does running icedove and tampering with the certificates change anything outside ~/.icedove? Greets jre -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.7.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages icedove depends on: ii debianutils 4.8 ii fontconfig 2.11.0-6.7 ii libasound2 1.1.2-1 ii libatk1.0-0 2.22.0-1 ii libc6 2.24-3 ii libcairo2 1.14.6-1+b1 ii libdbus-1-3 1.10.10-1 ii libdbus-glib-1-2 0.108-1 ii libevent-2.0-5 2.0.21-stable-2+b1 ii libffi6 3.2.1-6 ii libfontconfig1 2.11.0-6.7 ii libfreetype6 2.6.3-3+b1 ii libgcc1 1:6.1.1-11 ii libgdk-pixbuf2.0-0 2.36.0-1 ii libglib2.0-0 2.50.0-1 ii libgtk2.0-0 2.24.31-1 ii libhunspell-1.4-0 1.4.1-2 ii libicu57 57.1-4 ii libnspr4 2:4.12-2 ii libnss3 2:3.26-2 ii libpango-1.0-0 1.40.3-2 ii libpangocairo-1.0-0 1.40.3-2 ii libpangoft2-1.0-0 1.40.3-2 ii libpixman-1-0 0.34.0-1 ii libsqlite3-0 3.14.2-1 ii libstartup-notification0 0.12-4 ii libstdc++6 6.1.1-11 ii libvpx4 1.6.0-2 ii libx11-6 2:1.6.3-1 ii libxcomposite1 1:0.4.4-1 ii libxdamage1 1:1.1.4-2+b1 ii libxext6 2:1.3.3-1 ii libxfixes3 1:5.0.2-1 ii libxrender1 1:0.9.9-2 ii libxt6 1:1.1.5-1 ii psmisc 22.21-2.1+b1 ii zlib1g 1:1.2.8.dfsg-2+b1 Versions of packages icedove recommends: ii hunspell-de-de-frami [hunspell-dictionary] 1:5.2.1-2 ii hunspell-en-us [hunspell-dictionary] 20070829-6 ii iceowl-extension 1:45.4.0-1 Versions of packages icedove suggests: pn apparmor <none> pn fonts-lyx <none> ii libgssapi-krb5-2 1.14.3+dfsg-2 -- no debconf information
