[Pkg-xmpp-devel] Bug#972215: Bug#972215: gajim: Cannot connect to host with untrusted certificate

[Martin]

Hi,

On 2020-10-14 19:06, Colomban Wendling wrote:
> What I get is a popup telling me the certificate authority is unknown
> (which is expected here, it's self-signed), and allowing me to see the
> cert and to add it to the list of trusted certificates.  However, doing
> so does not work, and the dialog pops up again and again and again,
> effectively preventing any connection to that account.
>
> This actually renders Gajim unusable for me as I cannot connect to any
> of my accounts.

I'm not aware of that issue, but I use letsencrypt for my
servers. I wonder, whether this is related to
"ignore_ssl_errors no longer works with Gajim 1.2.2"
(https://dev.gajim.org/gajim/gajim/-/issues/10237)?

However, there the certificate is not only self-signed, but also
erroneous (wrong host or outdated). Could you comment here,
whether this is the case with your certificates?

If your certificate is correct, but it still does not work, you
might like to try that, given you have root accesss:

Add the self-signed certificate to the system, IIRC, by storing
the certificate file under /usr/local/share/ca-certificates/ and
run update-ca-certificates. Then restart Gajim. Does that help?

Cheers