Trac is being migrated to new services! Issues can be found in our new YouTrack instance and WIKI pages can be found on our website.

Changes between Version 12 and Version 13 of MSNCertIssue


Ignore:
Timestamp:
Jan 22, 2013, 12:14:05 AM (11 years ago)
Author:
MarkDoliner
Comment:

Link to root cert using https to reduce the likelihood of man-in-the-middle

Legend:

Unmodified
Added
Removed
Modified
  • MSNCertIssue

    v12 v13  
    22MSN recently changed the certificate used on some of their servers.  This certificate is used to negotiate a secure socket layer (SSL) session, an encrypted connection, between the client (Windows Live Messenger, Pidgin, etc.) and the server(s).
    33
    4 Unfortunately, this new certificate is signed by a root certificate that Pidgin does not provide. You may not see this problem if your distribution provides the root certificate and has configured Pidgin to use it. The error message you'll see is something like this:
     4Unfortunately, this new certificate is signed by a root certificate that Pidgin does not provide. You may not experience any problems if your distribution provides the root certificate and has configured Pidgin to use it. If you do experience a problem, you'll see one of these error messages:
    55
    66'''Unable to validate certificate:'''[[BR]]
     
    3636''If you have followed other (incorrect) instructions to replace the 'local-bay.contacts.msn.com' or 'local-blu-people.directory.live.com' certificate, then you must delete that certificate from `Tools->Certificates` first.''
    3737
    38 Download [http://hg.pidgin.im/pidgin/main/raw-file/default/share/ca-certs/Baltimore_CyberTrust_Root.pem Baltimore_CyberTrust_Root.pem], then follow the appropriate set of directions below.
     38Download [https://hg.pidgin.im/pidgin/main/raw-file/default/share/ca-certs/Baltimore_CyberTrust_Root.pem Baltimore_CyberTrust_Root.pem], then follow the appropriate set of directions below.
    3939
    4040=== Windows ===
All information, including names and email addresses, entered onto this website or sent to mailing lists affiliated with this website will be public. Do not post confidential information, especially passwords!