[Pkg-xmpp-devel] Bug#972215: gajim: Cannot connect to host with untrusted certificate

[Colomban Wendling]

Package: gajim
Version: 1.2.2-1
Severity: important

Dear Maintainer,

Since at least 1.2.2 (I didn't upgrade through all versions, so I can't
be positive on which version introduced it), I cannot connect to my
accounts anymore.

What I get is a popup telling me the certificate authority is unknown
(which is expected here, it's self-signed), and allowing me to see the
cert and to add it to the list of trusted certificates.  However, doing
so does not work, and the dialog pops up again and again and again,
effectively preventing any connection to that account.

This actually renders Gajim unusable for me as I cannot connect to any
of my accounts.

Regards

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'oldoldstable'), (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.8.0-2-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages gajim depends on:
ii  gir1.2-gtk-3.0       3.24.23-1
ii  python3              3.8.2-3
ii  python3-cairo        1.16.2-4
ii  python3-css-parser   1.0.4-2
ii  python3-cssutils     1.0.2-3
ii  python3-gi           3.38.0-1
ii  python3-gi-cairo     3.38.0-1
ii  python3-idna         2.10-1
ii  python3-keyring      21.3.0-1
ii  python3-nbxmpp       1.0.2-1
ii  python3-openssl      19.1.0-2
ii  python3-packaging    20.4-1
ii  python3-precis-i18n  1.0.0-1

Versions of packages gajim recommends:
ii  alsa-utils                                      1.2.3-1
ii  aspell-en [aspell-dictionary]                   2018.04.16-0-1
ii  aspell-fr [aspell-dictionary]                   0.50-3-8
ii  ca-certificates                                 20200601
ii  dbus                                            1.12.20-1
ii  fonts-noto-color-emoji                          0~20200916-1
ii  gajim-omemo                                     2.6.80-1
ii  gajim-pgp                                       1.2.46-2
ii  gir1.2-farstream-0.2                            0.2.8-5
ii  gir1.2-geoclue-2.0                              2.5.6-1
ii  gir1.2-gsound-1.0                               1.0.2-4
ii  gir1.2-gspell-1                                 1.8.4-1
ii  gir1.2-gst-plugins-base-1.0                     1.18.0-2
ii  gir1.2-gstreamer-1.0                            1.18.0-3
ii  gir1.2-gupnpigd-1.0                             0.2.5-5
ii  gir1.2-secret-1                                 0.20.3-1
ii  gnome-flashback [notification-daemon]           3.36.4-1
ii  gnome-shell [notification-daemon]               3.38.0-2
ii  gstreamer1.0-plugins-ugly                       1.18.0-1
ii  mate-notification-daemon [notification-daemon]  1.24.1-1
ii  notification-daemon                             3.20.0-4
ii  pulseaudio-utils                                13.0-5
ii  python3-crypto                                  2.6.1-13.1+b1
ii  python3-dbus                                    1.2.16-3
ii  python3-gnupg                                   0.4.6-1
ii  python3-pil                                     7.2.0-1
ii  sox                                             14.4.2+git20190427-2

Versions of packages gajim suggests:
ii  avahi-daemon      0.8-3
ii  libxss1           1:1.2.3-1
ii  nautilus-sendto   3.8.6-3
pn  python3-kerberos  <none>
ii  python3-pycurl    7.43.0.6-1

-- no debconf information