I've started running Kmail at version 3.4.1, and I'm now using the current version, 3.4.2-r1. Whenever I start the mail client, I get told that the certificate for my mail server does not match the website name (this is correct, they do not match). It asks me if I would like to continue, I choose Yes. It asks if I would like to save this certificate for the future. I choose "Forever." Next time I restart Kmail. it asks the same question. It is not saving the certificate forever. Reproducible: Always Steps to Reproduce: 1. emerge kmail 2. add a ssl / tls enabled webserver 3. download your mail once (choose "Forever" when it asks you how long to save the cert for) 4. restart kmail, watch it ask you the same question again Actual Results: Kmail keeps asking me to save the certificate every time I restart it. Expected Results: Save the ssl cert forever. irasnyd@yuki ~ $ emerge info Portage 2.0.51.22-r2 (default-linux/x86/2005.0, gcc-3.4.4, glibc-2.3.5-r1, 2.6.12-morph7 i686) ================================================================= System uname: 2.6.12-morph7 i686 AMD Athlon(tm) XP 3000+ Gentoo Base System version 1.6.13 ccache version 2.4 [enabled] dev-lang/python: 2.4.1-r1 sys-apps/sandbox: 1.2.11 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6 sys-devel/binutils: 2.16.1 sys-devel/libtool: 1.5.18-r1 virtual/os-headers: 2.6.11-r2 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=athlon-xp -O2 -fomit-frame-pointer -pipe -fforce-addr -fweb -ftracer -funit-at-a-time" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-march=athlon-xp -O2 -fomit-frame-pointer -pipe -fforce-addr -fweb -ftracer -funit-at-a-time -fvisibility-inlines-hidden" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig candy ccache distlocks fixpackages sandbox sfperms strict userpriv usersandbox" GENTOO_MIRRORS="http://gentoo.ccccom.com http://gentoo.llarian.net/ http://gentoo.osuosl.org/ http://cudlug.cudenver.edu/gentoo/" LANG="en_US.utf8" LC_ALL="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--sort-common -s" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage /usr/local/portage-gentopia /usr/local/portage-bmg" SYNC="rsync://ping.irasnyd.homelinux.com/gentoo-portage" USE="x86 3dnow 3dnowex 3dnowext S3TC X a52 aac acpi aim alsa avi berkdb bigger-fonts bitmap-fonts bzip2 cdr crypt cups curl dvd dvdr dvdread fbcon flac foomaticdb freetype gdbm gif gimpprint gpm gstreamer gtk gtk2 hal imlib imlib2 jabber java jpeg kdeenablefinal mad matroska mmap mmx mmx2 mmxext mozilla moznocompose moznoirc moznomail mp3 mpeg ncurses no_wxgtk1 nowebdav nptl nptlonly nvidia offensive ogg oggvorbis opengl oscar pam pdflib png ppds python radeon readline real rtc sdl slang spell sse ssl subversion theora threads truetype truetype-fonts unicode usb userlocales vim-with-x vorbis win32codecs xanim xine xml xml2 xmms xprint xv xvid xvmc zlib video_cards_radeon userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LINGUAS, MAKEOPTS
Probably this is not Gentoo specific, you can see a long discussion about it here: https://bugs.kde.org/show_bug.cgi?id=54121
That bug was in 2003. There is another from 2005 that was marked duplicate, saying to use KMail-1.8. I'm using KMail-1.8.2. Should I report this upstream?
First you should try removing .kde/share/config/ksslpolicies if you didn't already. You said that the certificate does not match the website name, so this fits https://bugs.kde.org/show_bug.cgi?id=54121 comment #41 and maybe it is a known fact? You can make a comment in that bug, or open a new one asking to better deal with that situation (certificate and website not matching) if this is the expected behavior.