Pidgin 2.7.3 on Maemo5 - SSL certificates for MSN invalid

[Matthias Apitz]

El día Monday, November 22, 2010 a las 01:31:45PM +0100, Matthias Apitz escribió:

> and here is the data from the debug log:
> 
> Pidgin resolves via DNS for omega.contacts.msn.com 5 times the IP addr
> 207.46.113.78 which has the following certificates:
> 
> (13:08:31) gnutls/x509: Key print: ac:7e:e4:5f:97:b8:7e:f0:0b:ac:a6:51:9f:ba:51:f0:ad:73:17:8b
> (13:08:31) gnutls/x509: Key print: 7e:8a:c2:9c:5a:32:8c:c2:71:a2:d9:4f:75:70:f7:a9:1b:f6:94:05
> (13:08:31) gnutls/x509: Key print: 3d:29:1d:b8:ee:22:be:e1:33:70:06:f2:ef:c6:f9:db:dd:03:bb:25
> 
> Then it resolves to 207.46.118.183 which has other certificates:
> 
> (13:16:03) gnutls/x509: Key print: c8:f3:b1:69:52:36:07:33:b5:02:1b:a2:b2:b4:ce:32:b9:68:37:36
> (13:16:03) gnutls/x509: Key print: 3a:dd:0e:7e:a2:b2:84:ff:45:9e:13:73:65:b4:82:d1:88:df:bf:8a
> (13:16:03) gnutls/x509: Key print: e5:95:8d:48:fe:10:d7:34:03:11:e8:c0:3b:b2:29:40:da:ba:2d:a3
> 
> and it can verify with success:
>   
> (13:16:03) certificate: Successfully verified certificate for omega.contacts.msn.com
> 
> i.e. it depends of the server in question :-(

For the moment I have just added these lines to /etc/hosts:

# MSN sucks
# see Pidgin mail folder
207.46.118.183	omega.contacts.msn.com

and this makes pidgin happy for now... it's a dirty hack, I know :-)

	matthias
-- 
Matthias Apitz
t +49-89-61308 351 - f +49-89-61308 399 - m +49-170-4527211
e <guru at unixarea.de> - w http://www.unixarea.de/