Yves-Alexis Perez wrote:
> Package: gajim
> Version: 0.12.1-1
> Severity: normal
> 
> Hi,
> 
> I just upgraded gajim, and it now tries to verify my SSL certificate, which
> is nice. I have python-openssl installed.
> 
> My server certificate is signed by an own CA, for which I have a CA file in
> /etc/ssl/certs. Using openssl s_client I can connect to my jabber server on
> port 5223 and have it verify it, and it works (if I pass -CAfile to openssl
> s_client).
> 
> It seems that gajim (or python-openssl, or openssl, I don't really know)
> doesn't use my CA file, and thus doesn't see that this “self signed
> certificate” is my trusted CA.
> 
> And btw, I can't display the given certificate in gajim, to be sure it's
> the correct one (there's no reason the certificate used on port 5223/ssl
> should be different than the one on 5222/starttls, but just in case…)
> 
> Cheers,

Gajim don't check system certificate, because it's not the same in all
distributions. A ticket has been opened about that in Gajim's tracker:
http://trac.gajim.org/ticket/4633

-- 
Yann



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to