Changes between Version 4 and Version 5 of MSNCertIssue

Timestamp:

Nov 22, 2010, 5:45:22 AM (13 years ago)

Author:

John Bailey

Comment:

Some tweaks and a crapload more text.

MSNCertIssue

@@ +1 @@
+= MSN Certificate Error =
+MSN recently changed the certificate used on some of their servers.  This certificate is used to negotiate a secure socket layer (SSL) session, or an encrypted connection, between the client (Windows Live Messenger, Pidgin, etc.) and the server(s).
+
+Unfortunately, not all the servers that are using this new certificate present the correct information to Pidgin for us to validate the certificate properly.  Additional wrinkles are that not all omega.contacts.msn.com servers have been migrated to the new certificate, and that some of the servers that have been migrated are also correctly configured.  Because of this, given enough attempts, you may actually achieve an occasional successful connection.  Most of the time, however, you'll get an error message.
+
+The error message you'll see is something like this:
+
+'''Unable to validate certificate:'''[[BR]]
+The certificate for omega.contacts.msn.com could not be validated. The certificate chain presented is invalid.
+
+If you're reading this page, you're probably experiencing this problem.  Here is the solution.
+
+[[BR]]
+
+== Upgrade to Pidgin 2.7.6 or newer ==
+In Pidgin 2.7.6, we began distributing the additional intermediate certificates that some of MSN's servers are not sending us.  This will solve the problem for most people.  If upgrading doesn't work, wait a few minutes and try connecting again.  Also make sure you restarted Pidgin after upgrading!
+
+[[BR]]
+
+== If upgrading is not possible ==
+If you can't upgrade to Pidgin 2.7.6 or newer, then here's how to fix the problem.  This should work for any version of Pidgin from 2.5.0 to 2.7.5, inclusive.
+
+Note that while we verified the certificates we instruct you to download below, there is always a risk involved in downloading certificates, especially ones you have not personally verified, and adding them to your trusted CA store.  This is why we strongly recommend upgrading to Pidgin 2.7.6 or newer, as you can be assured you've received the correct copy of certificates by doing so.  If you're willing to trust us and take the risk, read on.
+
 === Get the new intermediate certificates ===
 ''If you have followed other (incorrect) instructions to replace the 'omega.contacts.msn.com' certificate, then you must delete that certificate from `Tools->Certificates` first.''