Digital Certificate Invalid! Pidgin 2.10.10 win32installer

[Daniel Atallah]

On Sat, Oct 25, 2014 at 1:34 PM, Doctor Who <who_doctor at hotmail.com> wrote:

> Hi:
>
> I'm using XP. Before you say: That old thing!?? I plan to migrate soon.
> But I'm sure I'm not the only one still using XP.
>
> Regards
> Tom
>

As of Pidgin 2.10.10 the Authenticode signatures used for the Windows
builds use the SHA-256 algorithm which Windows XP doesn't support.
I've updated the documentation at
https://developer.pidgin.im/wiki/Are%20the%20packages%20signed#WindowsInstallers
based
on this.
You can still validate the packages using GPG.

-D



>
> ------------------------------
> Date: Sat, 25 Oct 2014 09:28:50 -0400
> Subject: RE: Digital Certificate Invalid! Pidgin 2.10.10 win32installer
>
> From: datallah at pidgin.im
> To: who_doctor at hotmail.com
>
> Which OS are you using?
> On Oct 25, 2014 3:42 AM, "Doctor Who" <who_doctor at hotmail.com> wrote:
>
> Hi:
>
> On the Digital Signature Details windows, where it normally would says
> "This digital signature is OK" it says it is invalid. See attached screen
> shot.
>
>
>
> Regards
> Tom
>
> ------------------------------
> Date: Fri, 24 Oct 2014 18:27:23 -0400
> Subject: Re: Digital Certificate Invalid! Pidgin 2.10.10 win32installer
> From: datallah at pidgin.im
> To: who_doctor at hotmail.com
> CC: support at pidgin.im
>
>
>
> On Fri, Oct 24, 2014 at 4:57 PM, Doctor Who <who_doctor at hotmail.com>
> wrote:
> >
> > Hi:
> >
> > I just received notification through pidgin that a new version is
> available. However, once downloaded I noticed the the digital certificate
> is NOT valid! Has the server been compromised?
>
>
> What exactly do you mean by "I noticed the the digital certificate is NOT
> valid"?
>
> https://developer.pidgin.im/wiki/Are%20the%20packages%20signed#WindowsInstallers
> contains instructions for how to validate the signatures.
>
>
> > Also, I tried signing up for an account on the pidgin.im website last
> week. And I never receved a confirmation email. But while my browser was
> still caching my signup info I could access my preferences etc.. I kept
> clicking resend confirmation email. But never received anything.
> >
> > Once I restarted, the site asked for my login which now does not work.
> When I try to reset the password I never receive the password reset email.
> But when I try to create another account, assuming it did not go through
> the first time, I am informed that an account for my email already exists.
> So I seem to be stuck in limbo. Is the pidgin.im website broken? What's
> going on?
>
> Check your spam mailbox.
> I can see that you created an account with this email address 6 days ago
> and that emails were sent successfully.
>
> >
> > Can anyone help me out here? My reason for wanting an account was to
> post a bug. There is no other contact info or way to get anyone's attention
> on the website. So I figured I would give the mailing list a try.
> >
> > Regards
> > Tom
> >
> > _______________________________________________
> > Support at pidgin.im mailing list
> > Want to unsubscribe?  Use this link:
> > https://pidgin.im/cgi-bin/mailman/listinfo/support
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pidgin.im/pipermail/support/attachments/20141026/09ca29a2/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pidgin cert invalid.jpg
Type: image/jpeg
Size: 30484 bytes
Desc: not available
URL: <https://pidgin.im/pipermail/support/attachments/20141026/09ca29a2/attachment-0001.jpg>