Bug 146106

Summary:	Loading graphic with XGraphicProvider::queryGraphic from https: CRL validation does not use proxy setting
Product:	LibreOffice	Reporter:	pierre.sauter
Component:	BASIC	Assignee:	Not Assigned <libreoffice-bugs>
Status:	NEW ---
Severity:	normal
Priority:	medium
Version:	7.1.6.2 release
Hardware:	x86-64 (AMD64)
OS:	Linux (All)
Whiteboard:
Crash report or crash signature:		Regression By:

Description pierre.sauter 2021-12-07 20:09:24 UTC

Description:
When loading an image from a https URL, the CRL check tries to connect to crl.root-x1.letsencrypt.org.edgekey.net directly instead of going through the configured proxy, resulting in a timeout.

Steps to Reproduce:
1. Be behind a http proxy and configure it in Libreoffice
2. Load an image from a https URL with XGraphicProvider::queryGraphic

Actual Results:
CRL check of the https certificate is tried directly resulting in a timeout

Expected Results:
CRL should be loaded via the http proxy


Reproducible: Always


User Profile Reset: No



Additional Info:
The CRL check seems to have been introduced sometime around 7.0. We recently upgraded from 6.4.7-0ubuntu0.20.04.1 to 7.1.7-0ubuntu0.21.04.1~bpo20.04.1 when that version landed in Ubuntu 20.04 backports. Before that it was working as expected. Also changing the URL to http resolves the issue in 7.1.7

Comment 1 sockseight 2022-12-03 06:16:33 UTC

There seems to be some issue in setting the Proxy configurations. 

While they may be better addressed as a separate bug, this issue warrants to be investigated further.

Comment 2 sockseight 2022-12-03 07:02:29 UTC

the above comment was due to this bug -> https://bugs.documentfoundation.org/show_bug.cgi?id=33697