[lucid] ubuntuone-preferences: SSL hostname validation failed

[Roman Yepishev]

New lucid accounts cannot register or add a new machine.

At the moment ubuntuone-preferences shows an error message:

Authorization Error
[Errno socket error] SSL hostname validation failed

This is happening because ubuntuone.com (which is referenced from lucid clients) has subject field of SSL certificate set to *.ubuntuone.com and the monkey-patched SSL verification checks for subject field only.

ubuntuone.com is present in subjectAltName but it is not being checked.

FIXED by changing the certificate on the server side.

[Roman Yepishev (rye)]

Updated CVE patch originated from LP:882062

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "CVE-2011-4409.patch" of this bug report has been identified as being a patch. The ubuntu-reviewers team has been subscribed to the bug report so that they can review the patch. In the event that this is in fact not a patch you can resolve this situation by removing the tag 'patch' from the bug report and editing the attachment so that it is not flagged as a patch. Additionally, if you are member of the ubuntu-reviewers team please also unsubscribe the team from this bug report.

[This is an automated message performed by a Launchpad user owned by Brian Murray. Please contact him regarding any issues with the action taken in this bug report.]

[Roman Yepishev (rye)]

oauth_urls which uses the new urls and can be used as a workaound for the issue.

[Roman Yepishev (rye)]

This was fixed by changing ubuntuone.com certificate to a non-wildcard one.