Dotaz: pidgin a jabber.abclinuxu.cz

[hajma]

DD, nedaří se mi použít pidgin 2.5.1 na jabber.abclinuxu.cz, hlásí mi "Neplatný řetěz certifikátu

Certifikační řetěz pro jabber.abclinuxu.cz je neplatný."

(dole výpis z konsole)

Lze nějak pidgin donutit k jeho akceptování, než ten certifikát někdo spraví?

předem díky za každé nakopnutí

(23:46:21) account: Connecting to account hajma@abclinuxu.cz/Home
(23:46:21) connection: Connecting. gc = 0xa34abb8
(23:46:21) dns: DNS query for 'jabber.abclinuxu.cz' queued
(23:46:21) dns: Created new DNS child 23371, there are now 1 children.
(23:46:21) dns: Successfully sent DNS request to child 23371
(23:46:21) dns: Got response for 'jabber.abclinuxu.cz'
(23:46:21) dnsquery: IP resolved for jabber.abclinuxu.cz
(23:46:21) proxy: Attempting connection to 195.70.150.51
(23:46:21) proxy: Connecting to jabber.abclinuxu.cz:5223 with no proxy
(23:46:21) proxy: Connection in progress
(23:46:21) proxy: Connected to jabber.abclinuxu.cz:5223.
(23:46:21) gnutls: Starting handshake with jabber.abclinuxu.cz
(23:46:22) gnutls: Handshake complete
(23:46:22) gnutls/x509: Key print: 9b:84:d7:72:e3:a8:2a:40:4d:0d:d9:3e:29:66:30:8b:7b:4d:5a:60
(23:46:22) gnutls/x509: Key print: db:4c:42:69:07:3f:e9:c2:a3:7d:89:0a:5c:1b:18:c4:18:4e:2a:2d
(23:46:22) gnutls/x509: Key print: 13:5c:ec:36:f4:9c:b8:e9:3b:1a:b2:70:cd:80:88:46:76:ce:8f:33
(23:46:22) gnutls: Peer provided 3 certs
(23:46:22) gnutls: Lvl 0 SHA1 fingerprint: 9b:84:d7:72:e3:a8:2a:40:4d:0d:d9:3e:29:66:30:8b:7b:4d:5a:60
(23:46:22) gnutls: Serial: 5e:8c
(23:46:22) gnutls: Cert DN: CN=abclinuxu.cz
(23:46:22) gnutls: Cert Issuer DN: O=CAcert Inc.,OU=http://www.CAcert.org,CN=CAcert Class 3 Root
(23:46:22) gnutls: Lvl 1 SHA1 fingerprint: db:4c:42:69:07:3f:e9:c2:a3:7d:89:0a:5c:1b:18:c4:18:4e:2a:2d
(23:46:22) gnutls: Serial: 01
(23:46:22) gnutls: Cert DN: O=CAcert Inc.,OU=http://www.CAcert.org,CN=CAcert Class 3 Root
(23:46:22) gnutls: Cert Issuer DN: O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=support@cacert.org
(23:46:22) gnutls: Lvl 2 SHA1 fingerprint: 13:5c:ec:36:f4:9c:b8:e9:3b:1a:b2:70:cd:80:88:46:76:ce:8f:33
(23:46:22) gnutls: Serial: 00
(23:46:22) gnutls: Cert DN: O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=support@cacert.org
(23:46:22) gnutls: Cert Issuer DN: O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=support@cacert.org
(23:46:22) certificate/x509/tls_cached: Starting verify for jabber.abclinuxu.cz
(23:46:22) certificate/x509/tls_cached: Checking for cached cert...
(23:46:22) certificate/x509/tls_cached: ...Not in cache
(23:46:22) gnutls/x509: Certificate for CN=abclinuxu.cz claims to be issued by O=CAcert Inc.,OU=http://www.CAcert.org,CN=CAcert Class 3 Root, but the certificate for CN=abclinuxu.cz does not match.
(23:46:22) certificate: Checking signature chain for uid=CN=abclinuxu.cz
(23:46:22) certificate: ...Good signature by O=CAcert Inc.,OU=http://www.CAcert.org,CN=CAcert Class 3 Root
(23:46:22) gnutls/x509: Bad signature for O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=support@cacert.org on O=CAcert Inc.,OU=http://www.CAcert.org,CN=CAcert Class 3 Root
(23:46:22) certificate: ...Bad or missing signature by O=Root CA,OU=http://www.cacert.org,CN=CA Cert Signing Authority,EMAIL=support@cacert.org
Chain is INVALID
(23:46:22) certificate: Failed to verify certificate for jabber.abclinuxu.cz
(23:46:22) account: Disconnecting account 0x9fe1240
(23:46:22) connection: Disconnecting connection 0xa34abb8
(23:46:22) connection: Destroying connection 0xa34abb8

Odpovědi

[Andrej Herceg]

V Pidgin 2.5.2 mi to funguje normálne (verziu 2.5.1 už nemám, tak nemôžem vyskúšať, či by mi to fungovalo aj v nej).

[Leoš Literák]

Presunul jsem dotaz do poradny skupiny portal. Jinak momentalne cekame na vyrizeni certifikatu od thawte, pak nebudeme mit self-signed certifikat. Akorat jedna zmena tu bude, pro SSL pak budes muset pouzivat hostname www.abclinuxu.cz misto jabber.abclinuxu.cz. Nehodlame nakupovat certifikat pro kazdou subdomenu a wildchar certifikaty jsou neprimerene drahe.