[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2010-05-17 Thread Brian Candler
The problem definitely remains. This morning, pidgin under Hardy started giving me the 'invalid certificate' error for login.live.com, asking me blindly whether or not to accept the new certificate. It showed me nothing more than the fingerprint and start/end times to make that choice. Coincident

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2009-07-15 Thread Gustav Svensson
tobiasly wrote: So, for those that are also having this problem, do you have 2 different Gmail/Google Apps accounts as well? Yes. I guess that is what is causing the problem. Bryan C's workaround fixes the problem for me as well. -- Pidgin not using existing root TLS/SSL certificates for valida

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2009-04-09 Thread Sebastien Bacher
** Changed in: pidgin (Ubuntu) Importance: Undecided => Low -- Pidgin not using existing root TLS/SSL certificates for validation https://bugs.launchpad.net/bugs/302314 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs m

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2008-12-18 Thread tobiasly
I would like to add another data point to this issue. I was having the same issue as Bernard_Ivo in that I kept getting asked whether to accept the talk.google.com certificate each time I started pidging. I have a talk.gmail.com certificate in ~/.purple/certificates/x509/tls_peers already so I didn

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2008-12-08 Thread Bernard_Ivo
Hi, I can confirm I have the same problem connecting to Gtalk for a week already. Common name: gmail.com Fingerprint (SHA1): 9f:f8:3b:da:2c:a3:12:55:24:d5:b9:d6:fc:49:69:8f:0a:91:d8:cd Activation date: Wed Apr 11 20:17:38 2007 Expiration date: Tue Apr 10 20:17:38 2012 Somehow it takes too long to

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2008-11-30 Thread Barak Naveh
Hey Bryan, thanks for the workaround. -- Pidgin not using existing root TLS/SSL certificates for validation https://bugs.launchpad.net/bugs/302314 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@l

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2008-11-27 Thread Bryan C
To correct my previous comment (https://bugs.launchpad.net/ubuntu/+source/pidgin/+bug/302314/comments/3), the path to place the login.live.com certificate (or any other certificate you want Pidgin to accept per-user) is ~/.purple/certificates/x509/tls_peers/ Sorry for the confusion. I was thin

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2008-11-27 Thread komputes
I can confirm having an issue with an MSN account. Pidgin is asking me if I will "Accept certificate from rsi.hotmail.com" This all started at the begining of the week and happens from multiple different internet connections. -- Pidgin not using existing root TLS/SSL certificates for validation h

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2008-11-27 Thread Bryan C
If Pidgin doesn't know whether the certificate is valid or not, you could be vulnerable to a man-in-the-middle attack by blindly accepting it (at least that's my understanding). Mind you, accepting it yourself without any other knowledge would be no worse than what Pidgin was doing before version 1

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2008-11-27 Thread Barak Naveh
any workaround for the certificate of login.live.com ? is it safe to accept it? -- Pidgin not using existing root TLS/SSL certificates for validation https://bugs.launchpad.net/bugs/302314 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2008-11-26 Thread Bug Watch Updater
** Changed in: pidgin Status: Unknown => Fix Released -- Pidgin not using existing root TLS/SSL certificates for validation https://bugs.launchpad.net/bugs/302314 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mai

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2008-11-26 Thread bugmenot
** Bug watch added: Pidgin Trac #7002 http://developer.pidgin.im/ticket/7002 ** Also affects: pidgin via http://developer.pidgin.im/ticket/7002 Importance: Unknown Status: Unknown -- Pidgin not using existing root TLS/SSL certificates for validation https://bugs.launchpad.net/bug

[Bug 302314] Re: Pidgin not using existing root TLS/SSL certificates for validation

2008-11-26 Thread Bryan C
As an aside, if someone else who is affected by this bug attempts the workaround I provided in the bug description to connect to Google Talk, and Pidgin warns that "the certificate presented by 'talk.google.com' claims to be from 'gmail.com' instead", you might be connecting to incorrect (obsolete?