empathy does not display certificate error, interface for importing certificates missing
Bug #480791 reported by
Mitja Kleider
This bug affects 11 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Empathy |
Expired
|
Wishlist
|
|||
meta-telepathy |
Fix Released
|
Medium
|
|||
empathy (Ubuntu) |
Triaged
|
Low
|
Unassigned |
Bug Description
Binary package hint: empathy
Ubuntu 9.10
$ dpkg -s empathy
Version: 2.28.1.1-0ubuntu1
Try to connect empathy to a server via SSL/TLS which provides an untrusted certificate.
Empathy will report "Network error" without further information.
Empathy does not provide any way to import the certificate. The only option available in account settings is to ignore any certificate error (allowing man-in-the-middle attacks).
Changed in empathy (Ubuntu): | |
assignee: | nobody → Ubuntu Desktop Bugs (desktop-bugs) |
importance: | Undecided → Low |
status: | New → Triaged |
Changed in empathy: | |
status: | Unknown → Confirmed |
Changed in meta-telepathy: | |
importance: | Unknown → Medium |
status: | Unknown → In Progress |
Changed in empathy: | |
importance: | Unknown → Wishlist |
Changed in meta-telepathy: | |
importance: | Medium → Unknown |
status: | In Progress → Fix Released |
Changed in meta-telepathy: | |
importance: | Unknown → Medium |
Changed in empathy (Ubuntu): | |
assignee: | Ubuntu Desktop Bugs (desktop-bugs) → nobody |
Changed in empathy: | |
status: | Confirmed → Expired |
To post a comment you must log in.
When exchanging certificates, either during a server handshake, or an E2E handshake, there needs to be an API that would expose the certificate verification procedure to end-clients so that they could render the process interactive and allow the user to perform a "leap of faith".