[Bug 676972] Re: pidgin does not connect to msn, certificate error

[Martin Pitt]

Accepted pidgin into maverick-proposed, the package will build now and
be available in a few hours. Please test and give feedback here. See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed. Thank you in advance!

** Changed in: pidgin (Ubuntu Maverick)
       Status: New => Fix Committed

** Tags added: verification-needed

-- 
pidgin does not connect to msn, certificate error
https://bugs.launchpad.net/bugs/676972
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is a direct subscriber.

Status in Pidgin: New
Status in “pidgin” package in Ubuntu: Fix Released
Status in “pidgin” source package in Maverick: Fix Committed

Bug description:
When attempting to connect to MSN, Pidgin fails to load the contact list, citing an issue with the SSL certificate of omega.contacts.msn.com. This happened due to Microsoft renewing both the omega.contacts.msn.com certificate, as well as their certification authority certificate "Microsoft Secure Server Authority". Hence, the certificate in /usr/share/purple/ca-certs/Microsoft_Secure_Server_Authority.pem is outdated.

In addition, the transition from the old to the new certificate is not complete, only half-done, so a simple workaround of updating the certificate would not work. Both the old and new certificates have to be included. Debdiffs for natty and maverick are attached.

TEST CASE:
1. Start Pidgin
2. Click Tools->Certificates
3. Delete the omega.contacts.msn.com certificate
4. Try connecting to a MSN messenger account
5. If it fails with "Unable to validate certificate", then this bug is present.