[Pidgin] #11278: new freenode ssl certificate

Pidgin trac at pidgin.im
Tue Feb 2 09:14:42 EST 2010


#11278: new freenode ssl certificate
-----------------------------+----------------------------------------------
 Reporter:  keilo            |        Owner:  elb
     Type:  enhancement      |       Status:  new
Milestone:                   |    Component:  IRC
  Version:  2.6.5            |   Resolution:     
 Keywords:  ssl certificate  |  
-----------------------------+----------------------------------------------

Comment(by elb):

 We should not be adding this certificate to our certificate list, Freenode
 should be providing a complete certificate chain.  Their root certificate
 is from AddTrust, which is in my standard CA list on Ubuntu Linux, at
 least.  They should be presenting a series of three certificates to us:

  * AddTrust Server CA
  * Gandi Standard SSL CA
  * The attached certificate

 If they do not do so, we will not be able to verify their root
 certificate.

 Now, I haven't looked into this closely, yet, to see precisely what they
 are providing and where this process is falling down.  It's possible that
 we should be connecting these dots and simply cannot, somehow.

 Also, I believe we use our own private certificate database on Windows,
 which may be a different story -- I'll get a comment from our Windows guys
 on that issue.  Are you on Windows?

-- 
Ticket URL: <http://developer.pidgin.im/ticket/11278#comment:1>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list