Pidgin Error - Validate Certificate Error

[Matthias Apitz]

El día Thursday, November 18, 2010 a las 10:54:27AM +0000, Brian Morrison escribió:

> On Thu, 18 Nov 2010 04:45:42 -0600 (CST)
> "Jason Davis" <jason at mushypeas.net> wrote:
> 
> > Hi
> > 
> > I am trying to log into Pidgin using my MSN account and I am
> > constantly receiving the following error:
> > 
> > Unable to validate certificate
> > 
> > The certificate for omega.msn.com could not be validated,  The
> > certificate chain presented is invalid.
> > 
> > Any help on ths would be great :)
> 
> Which version of Pidgin? And what platform (I assume it's Windows, but
> am not certain).
> 
> Have you applied the Windows Update Root Certificate updates that come
> along from time to time? If the root cert is out of date then this is a
> possible result.

I have this morning the same problem with Pidgin 2.6.2 on FreeBSD:

the debug says:

(12:04:00) certificate/x509/tls_cached: Starting verify for omega.contacts.msn.com
(12:04:00) certificate/x509/tls_cached: Checking for cached cert...
(12:04:00) certificate/x509/tls_cached: ...Found cached cert
(12:04:00) gnutls: Attempting to load X.509 certificate from
/home/guru/.purple/certificates/x509/tls_peers/omega.contacts.msn.com
(12:04:00) certificate/x509/tls_cached: Peer cert did NOT match cached
(12:04:00) gnutls/x509: Certificate for
C=US,ST=WA,L=Redmond,O=MSN,OU=MSN Contact Services,CN=*.contacts.msn.com
claims to be issued by
DC=com,DC=microsoft,DC=corp,DC=redmond,CN=Microsoft Secure Server
Authority, but the certificate for C=US,ST=WA,L=Redmond,O=MSN,OU=MSN
Contact Services,CN=*.contacts.msn.com does not match.
(12:04:00) certificate: Checking signature chain for
uid=C=US,ST=WA,L=Redmond,O=MSN,OU=MSN Contact
Services,CN=*.contacts.msn.com
(12:04:00) gnutls/x509: Bad signature for
DC=com,DC=microsoft,DC=corp,DC=redmond,CN=Microsoft Secure Server
Authority on C=US,ST=WA,L=Redmond,O=MSN,OU=MSN Contact
Services,CN=*.contacts.msn.com
(12:04:00) certificate: ...Bad or missing signature by
DC=com,DC=microsoft,DC=corp,DC=redmond,CN=Microsoft Secure Server
Authority
Chain is INVALID
(12:04:00) certificate: Failed to verify certificate for
omega.contacts.msn.com
(12:04:00) msn: Operation {} failed. No response received from server.
(12:04:00) msn: C: NS 000: OUT

i.e. there must be something wrong as msn.com :-(

	matthias

-- 
Matthias Apitz
t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211
e <guru at unixarea.de> - w http://www.unixarea.de/