Your message dated Sat, 23 May 2009 14:29:08 -0400
with message-id <[email protected]>
and subject line Re: Bug#527500: finch: Unknown SSL certificate warnings for MSN
has caused the Debian Bug report #527500,
regarding finch: Unknown SSL certificate warnings for MSN
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
527500: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=527500
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: finch
Version: 2.5.5-1
Severity: minor


Most often when I sign in onto one of my MSN accounts, or my MSN
contacts sign in, change ther display name, etc... a tab pops up, asking
me to validate an SSL certificate:

"SSL Certificate Verification

Accept certificate for omega.contacts.msn.com?

The root certificate this one claims to be issued by is unknown to Pidgin."

It seems that MSN uses some CDN thing, and I've seen three certificates
that cause the warning:

Certificate Information

Common name: *.contacts.msn.com
Fingerprint (SHA1): de:27:b1:dd:f7:16:d6:4e:46:4d:59:ca:02:ef:3a:9a:38:bc:a1:e0
Activation date: Thu Jan 15 07:27:04 2009
Expiration date: Fri Jan 15 07:27:04 2010

Common name: *.contacts.msn.com
Fingerprint (SHA1): 6f:71:f5:8f:28:6d:f2:41:e9:24:80:2b:d5:38:c4:1d:53:df:64:62
Activation date: Thu Jan 15 07:29:08 2009
Expiration date: Fri Jan 15 07:29:08 2010

Common name: *.contacts.msn.com
Fingerprint (SHA1): 2a:21:22:1b:cf:9b:70:12:52:26:b3:45:1b:3b:e9:1f:8c:a9:16:53
Activation date: Mon Jan 19 15:55:17 2009
Expiration date: Tue Jan 19 15:55:17 2010

They seem legit, so I've accepted them (yes, the problem appeared around
that time).

This is annoying, and breaks auto-reconnection (since when I'm away, and
the connection drops, no one is there to accept the certificate for me).

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i586)

Kernel: Linux 2.6.26.2-grsec
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages finch depends on:
ii  libc6                     2.9-10         GNU C Library: Shared libraries
ii  libglib2.0-0              2.20.1-2       The GLib library of C routines
ii  libgstreamer0.10-0        0.10.22-3      Core GStreamer libraries and eleme
ii  libncursesw5              5.7+20090502-1 shared libraries for terminal hand
ii  libpurple0                2.5.5-1        multi-protocol instant messaging l
ii  libxml2                   2.7.3.dfsg-1   GNOME XML library
ii  pidgin-data               2.5.5-1        multi-protocol instant messaging c

Versions of packages finch recommends:
pn  gstreamer0.10-plugins-base    <none>     (no description available)
pn  gstreamer0.10-plugins-good    <none>     (no description available)

Versions of packages finch suggests:
ii  libx11-6                      2:1.2.1-1  X11 client-side library

-- no debconf information



--- End Message ---
--- Begin Message ---
Version: 2.5.6-1

If you don't use a Version header, the system has no idea which version
fixed the bug.

Pierre Ynard wrote:
> Apparently this was fixed in 2.5.6-1
> 



--- End Message ---

Reply via email to