[Pidgin] #7034: Insufficient info for "SSL Certificate Verification"

Pidgin trac at pidgin.im
Wed Sep 10 07:22:51 EDT 2008


#7034: Insufficient info for "SSL Certificate Verification"
--------------------------+-------------------------------------------------
 Reporter:  kiilerix      |     Owner:  lschiere
     Type:  defect        |    Status:  new     
Component:  unclassified  |   Version:  2.5.1   
 Keywords:                |  
--------------------------+-------------------------------------------------
 I just got a message

 SSL Certificate Verification
 Accept certificate for gmail.com?
 The root certificate this one claims to be issued by is unknown to Pidgin.
 View Certificate   Reject   Accept

 Certificate Information
 Common name: gmail.com
 Fingerprint (SHA1):
 9f:f8:3b:da:2c:a3:12:55:24:d5:b9:d6:fc:49:69:8f:0a:91:d8:cd
 Activation date: Wed Apr 11 19:17:38 2007
 Expiration date: Tue Apr 10 19:17:38 2012


 Which root certificate? Where does the chain of thrust break? Nobody can
 make a reasonable answer to the question. The user has to Accept but
 doesn't know what he is accepting.

 The Firefox dialog for unknown/selfsigned certificates (which I assume
 corresponds to this) is far from perfect, but at least it makes it
 _possible_ to understand the problem and make a qualified answer.


 pidgin-2.5.1-1.fc9.i386

-- 
Ticket URL: <http://developer.pidgin.im/ticket/7034>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list