[Pkg-telepathy-maintainers] Bug#639667: telepathy-gabble: Claims my server's certificate is self-signed

[Laurent Bigonville]

Le Wed, 31 Aug 2011 12:10:53 +0100,
Sam Morris <sam at robots.org.uk> a écrit :

> On Wed, 2011-08-31 at 11:08 +0200, Laurent Bigonville wrote:
> > Could you please try to add in empathy an explicit server?
> > 
> > The SSL certificate must also validate against the server part of
> > the JID, so robots.org.uk here I guess.
> 
> What should I set it to? The server part of the JID is 'robots.org.uk'
> and the certificate subject is 'CN=robots.org.uk'.

Well the issuer is 'CN=robots.org.uk'. The server certificate is
'CN=crypt.ethx.net'

You could add an explicit server in empathy config (in account advanced
options)

Otherwise you could add a subjectAltName to the certificate that match
robots.org.uk (if you are able to regenerate the certificate).

Cheers

Laurent Bigonville

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=GB, O=robots.org.uk, OU=robots.org.uk certificate authority, CN=robots.org.uk certificate authority
        Validity
            Not Before: Oct 30 14:22:44 2010 GMT
            Not After : Oct 29 14:22:44 2015 GMT
        Subject: CN=crypt.ethx.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (2048 bit)
                Modulus (2048 bit):
                    00:c2:d1:6e:e5:13:ab:19:e3:9f:23:ea:63:21:98:
                    49:c0:9a:d0:7b:7e:7e:cc:3f:1e:8a:d2:70:8b:68:
                    5d:ba:5f:45:de:d8:0c:52:f8:cd:7a:56:3d:d2:43:
                    ea:28:54:48:d6:63:9f:5d:07:d2:8e:a0:1d:1c:1f:
                    70:5c:82:2f:e3:53:7a:a1:36:36:8d:a5:62:46:35:
                    84:3a:41:6e:a1:a0:4b:60:ed:d8:d9:c4:78:17:ae:
                    43:7b:77:ca:4f:55:bd:bd:39:07:3c:1c:46:f4:e7:
                    18:ba:be:a4:61:49:51:41:d7:0c:1d:ef:d3:a8:8c:
                    a3:53:87:dd:c7:b0:4c:b9:c0:7d:67:f8:c0:12:46:
                    1c:46:bf:ec:74:1c:ce:1b:88:40:95:70:69:df:72:
                    eb:81:70:33:d3:ae:c7:28:a5:98:be:9e:d3:92:27:
                    ce:63:aa:88:db:64:4d:c5:41:02:2f:2b:ca:a1:1a:
                    48:9b:8a:1f:d3:a7:70:8b:46:81:6d:7e:0e:12:06:
                    4a:3c:8b:e1:0b:37:46:84:87:e6:bb:ef:cf:e2:6f:
                    d6:5b:bd:73:7d:a6:10:f8:52:c0:ce:17:0d:cb:c5:
                    5f:bf:1b:cb:ac:d7:a4:07:6a:4f:83:46:c9:13:ae:
                    7c:8c:4d:a6:32:7c:8b:82:0c:6e:5c:30:e2:77:26:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                BB:DF:42:BE:A9:B6:F3:1A:95:76:98:2C:F0:7A:77:5C:16:9E:6F:DA
            X509v3 Authority Key Identifier: 
                keyid:3B:0D:6E:32:6F:97:67:2E:4B:1E:8C:5C:62:E6:D8:E5:75:DB:7F:F1

    Signature Algorithm: sha1WithRSAEncryption
        56:13:1b:c4:5e:d9:dc:08:a0:6f:ce:51:cd:ec:73:45:89:25:
        d5:44:6c:f1:e1:2c:e3:9d:a2:33:3b:7e:7d:ea:3a:20:41:8d:
        7b:fd:9f:f6:3e:0e:9f:dd:4d:8f:a6:af:fc:ae:da:f2:79:03:
        82:44:c1:1d:d3:78:6a:24:f2:80:4c:70:ae:85:59:f4:d8:94:
        ef:4b:60:d6:7b:8c:31:51:9b:b2:39:17:44:16:be:dc:5b:2a:
        4c:6d:b2:e3:e8:70:ca:46:56:e6:99:bb:80:1e:39:01:2a:c0:
        78:a8:1d:e8:c1:bd:1b:cb:1b:51:c0:33:e0:4c:d1:1e:09:b8:
        a3:f5