[Bug 676972] Re: pidgin does not connect to msn, certificate error

[Felix Geyer]

New debdiff that adds a fix for bug #675903 (icq connection error) to
the debdiff from comment #7:

pidgin (1:2.7.3-1ubuntu3.2) maverick-proposed; urgency=low

  [ Chow Loong Jin ]
  * debian/patches/workaround-msn-ssl-failure.patch: Workaround SSL
    connectivity issues with MSN (LP: #676972)

  [ Felix Geyer ]
  * debian/patches/62_icq_server_changes.patch: Adapt to ICQ server changes.
  * debian/patches/63_icq_server_migration.patch: Migrate existing accounts to
    the new login server names. (LP: #675903)

 -- Felix Geyer <debfx-pkg at fobos.de>  Sat, 20 Nov 2010 13:37:00 +0100


** Patch added: "pidgin_2.7.3-1ubuntu3.2.debdiff"
   https://bugs.launchpad.net/ubuntu/+source/pidgin/+bug/676972/+attachment/1739240/+files/pidgin_2.7.3-1ubuntu3.2.debdiff

-- 
pidgin does not connect to msn, certificate error
https://bugs.launchpad.net/bugs/676972
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is a direct subscriber.

Status in Pidgin: New
Status in “pidgin” package in Ubuntu: Triaged

Bug description:
When attempting to connect to MSN, Pidgin fails to load the contact list, citing an issue with the SSL certificate of omega.contacts.msn.com. This happened due to Microsoft renewing both the omega.contacts.msn.com certificate, as well as their certification authority certificate "Microsoft Secure Server Authority". Hence, the certificate in /usr/share/purple/ca-certs/Microsoft_Secure_Server_Authority.pem is outdated.

In addition, the transition from the old to the new certificate is not complete, only half-done, so a simple workaround of updating the certificate would not work. Both the old and new certificates have to be included. Debdiffs for natty and maverick are attached.

TEST CASE:
1. Start Pidgin
2. Click Tools->Certificates
3. Delete the omega.contacts.msn.com certificate
4. Try connecting to a MSN messenger account
5. If it fails with "Unable to validate certificate", then this bug is present.