Pidgin does not validate correctly certificate chain

Luiz Angelo Daros de Luca luizluca at gmail.com
Tue Jul 9 13:43:58 EDT 2019


Hello,

I've opened a bug report regard this issue.

https://developer.pidgin.im/ticket/17393

But there is no feedback for it. It could even be classified as a security
bug as
pidgin/libpurple is not validating certificates correctly, resulting in
name constraints errors (both validating where it should not and not
checking it when it should).

Regards,
---
     Luiz Angelo Daros de Luca
            luizluca at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.pidgin.im/pipermail/support/attachments/20190709/73341083/attachment.html>


More information about the Support mailing list