[Pidgin] #14486: ICQ certificate problems

[Pidgin]

#14486: ICQ certificate problems
--------------------+-------------------------------------------------------
 Reporter:  aditsu  |        Owner:  MarkDoliner
     Type:  defect  |       Status:  closed     
Milestone:          |    Component:  ICQ        
  Version:  2.9.0   |   Resolution:  fixed      
 Keywords:          |  
--------------------+-------------------------------------------------------
Changes (by MarkDoliner):

  * status:  new => closed
  * resolution:  => fixed


Comment:

 I think there were two problems causing these messages to appear.
  1. The certificate for api.icq.net used a name of "api.login.icq.net."
 It's possible that this was partially our fault, for using an incorrect
 hostname to connect to this server.  Another possibility is that ICQ
 accidentally used the wrong cert on this server.  I think they have since
 fixed this problem on their end.
  1. Pidgin couldn't validate the certificates for api.icq.net and
 api.login.icq.net because our list of trusted CA certs didn't include the
 CA cert that signed ICQ's two certificates.  I think ICQ fixed this on
 their end by including the appropriate intermediate CA certs in the
 certificates returned by their servers.

 This problem isn't happening for me anymore.  It seems like ICQ has made
 appropriate changes to fix the problem on their end.  If other people are
 still having issues, feel free to add a comment here or re-open this or
 file a new ticket.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/14486#comment:2>
Pidgin <http://pidgin.im>
Pidgin