[Pidgin] #12312: GoDaddy Root Certificate and wildcard bug

Pidgin trac at pidgin.im
Tue Jul 13 10:41:49 EDT 2010


#12312: GoDaddy Root Certificate and wildcard bug
------------------+---------------------------------------------------------
Reporter:  ladar  |        Type:  defect                               
  Status:  new    |   Component:  libpurple                            
 Version:  2.7.1  |    Keywords:  ssl wildcard root godaddy ssl lavabit
------------------+---------------------------------------------------------
 I'm in the process of rolling out XMPP support for lavabit.com, and we
 have traditionally used a GoDaddy root certificate. Would you please
 consider adding the GoDaddy root certificates to the standard
 distribution? They can be downloaded from:

 https://certs.godaddy.com/anonymous/repository.seam

 In our testing process we also discovered that Pidgin will throw a CN
 mismatch error for a wildcard certificate issued to *.lavabit.com, when
 attempting to connect with a root domain like lavabit.com. Presumbly
 *.lavabit.com should match lavabit.com. Also, in our case the certificate
 actually lists both names, but lavabit.com is the second entry, and Pidgin
 doesn't seem to pick up on this.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/12312>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list