security update makes -idle unusable on servers with self-signed certificates

[Jordi Mallach]

The recent security update to precise's telepathy-idle package (0.1.11-2ubuntu0.1) adds strict checking for SSL certificates, as seen in upstream's 0.1.15 release. However, the patch doesn't add any UI to accept non-trusted certificates, making the IRC transport unusable against servers using self-signed certificates.

This is a _massive_ regression, with an easy fix available in the form of 0.1.16, which does add the required UI.

Debian's 0.1.16-1 package makes sure the upstream code doesn't require the latest and greatest glib, making a backport trivial.

Please fetch the upstream patch and Debian's addition to ease the backport to fix this issue.

Thanks,
Jordi

[Jordi Mallach (jordi)]

Err, just to clarify, telepathy-idle 0.1.16 doesn't add any UI, but adds the necessary dbus protocol & signal for -idle to notify Empathy of what's going on.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.