[Bug 676972] Re: pidgin does not connect to msn, certificate error

[Chow Loong Jin]

** Description changed:

- Binary package hint: pidgin
+ When attempting to connect to MSN, Pidgin fails to load the contact
+ list, citing an issue with the SSL certificate of
+ omega.contacts.msn.com. This happened due to Microsoft renewing both the
+ omega.contacts.msn.com certificate, as well as their certification
+ authority certificate "Microsoft Secure Server Authority". Hence, the
+ certificate in /usr/share/purple/ca-
+ certs/Microsoft_Secure_Server_Authority.pem is outdated.
  
- Hello. It seems that microsoft did some changes
+ In addition, the transition from the old to the new certificate is not
+ complete, only half-done, so a simple workaround of updating the
+ certificate would not work. Both the old and new certificates have to be
+ included. Debdiffs for natty and maverick are attached.
  
- http://blog.andreineculau.com/2010/11/pidgin-and-msn-certificate-error-
- for-omega-contacts-msn-com/
- 
- ProblemType: Bug
- DistroRelease: Ubuntu 10.10
- Package: pidgin 1:2.7.3-1ubuntu3.1
- ProcVersionSignature: Ubuntu 2.6.35-23.40-generic 2.6.35.7
- Uname: Linux 2.6.35-23-generic i686
- Architecture: i386
- Date: Thu Nov 18 14:53:34 2010
- ProcEnviron:
-  LANG=fi_FI.utf8
-  SHELL=/bin/bash
- SourcePackage: pidgin
+ TEST CASE:
+ 1. Start Pidgin
+ 2. Click Tools->Certificates
+ 3. Delete the omega.contacts.msn.com certificate
+ 4. Try connecting to a MSN messenger account
+ 5. If it fails with "Unable to validate certificate", then this bug is present.

-- 
pidgin does not connect to msn, certificate error
https://bugs.launchpad.net/bugs/676972
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is a direct subscriber.

Status in Pidgin: New
Status in “pidgin” package in Ubuntu: Triaged

Bug description:
When attempting to connect to MSN, Pidgin fails to load the contact list, citing an issue with the SSL certificate of omega.contacts.msn.com. This happened due to Microsoft renewing both the omega.contacts.msn.com certificate, as well as their certification authority certificate "Microsoft Secure Server Authority". Hence, the certificate in /usr/share/purple/ca-certs/Microsoft_Secure_Server_Authority.pem is outdated.

In addition, the transition from the old to the new certificate is not complete, only half-done, so a simple workaround of updating the certificate would not work. Both the old and new certificates have to be included. Debdiffs for natty and maverick are attached.

TEST CASE:
1. Start Pidgin
2. Click Tools->Certificates
3. Delete the omega.contacts.msn.com certificate
4. Try connecting to a MSN messenger account
5. If it fails with "Unable to validate certificate", then this bug is present.