[Pidgin] #11278: new freenode ssl certificate
Pidgin
trac at pidgin.im
Tue Feb 2 09:14:42 EST 2010
#11278: new freenode ssl certificate
-----------------------------+----------------------------------------------
Reporter: keilo | Owner: elb
Type: enhancement | Status: new
Milestone: | Component: IRC
Version: 2.6.5 | Resolution:
Keywords: ssl certificate |
-----------------------------+----------------------------------------------
Comment(by elb):
We should not be adding this certificate to our certificate list, Freenode
should be providing a complete certificate chain. Their root certificate
is from AddTrust, which is in my standard CA list on Ubuntu Linux, at
least. They should be presenting a series of three certificates to us:
* AddTrust Server CA
* Gandi Standard SSL CA
* The attached certificate
If they do not do so, we will not be able to verify their root
certificate.
Now, I haven't looked into this closely, yet, to see precisely what they
are providing and where this process is falling down. It's possible that
we should be connecting these dots and simply cannot, somehow.
Also, I believe we use our own private certificate database on Windows,
which may be a different story -- I'll get a comment from our Windows guys
on that issue. Are you on Windows?
--
Ticket URL: <http://developer.pidgin.im/ticket/11278#comment:1>
Pidgin <http://pidgin.im>
Pidgin
More information about the Tracker
mailing list