Empathy reports "self-signed certification" for gmail.com when it's not

Bug #833613 reported by Paul Sladen
118
This bug affects 25 people
Affects Status Importance Assigned to Milestone
empathy (Ubuntu)
Triaged
Medium
Unassigned

Bug Description

Empathy reports:

  This connection is untrusted. Would you like to continue anyway?
  The identity provided by the chat server cannot be verified.
  The certificate is self-signed.

For Gmail/Jabber; I suspect this a caching issue; the data Empathy gives in the drop-down is:

gmail.com
Identity: gmail.com
Verified by
Expires: 10/04/12

Subject Name
C (Country): US
ST (State): California
L (Locality): Mountain View
O (Organization): Google Inc.
CN (Common Name): gmail.com
Issuer Name
C (Country): US
O (Organization): Equifax
OU (Organizational Unit): Equifax Secure Certificate Authority
Issued Certificate
Version: 3
Serial Number: 07 3F 92
Not Valid Before: 2007-04-11
Not Valid After: 2012-04-10
Certificate Fingerprints
SHA1: 9F F8 3B DA 2C A3 12 55 24 D5 B9 D6 FC 49 69 8F 0A 91 D8 CD
MD5: B0 5C C7 C5 4B B6 BD E1 4C 19 5D EF 58 A9 FF 58
Signature
Signature Algorithm: SHA1 with RSA
Signature Parameters: 05 00
Signature: 7B E1 C1 A9 8D D1 0D 7F D5 3E 58 47 76 F5 D7 F3 63 74 F3 25 E8 67 95 8E 5C 1F 96 AC F1 B3 93 7B B3 CD 3F 38 FD EB B3 89 ED 33 D6 13 27 0C C2 54 BB 0A CA 88 B2 67 D1 18 E1 45 7E 81 F1 A3 E8 8F BA 06 7C B8 ED 8A 77 EF 90 1C 25 CB F8 CB A6 1A 39 16 E0 57 13 16 67 1E 57 F4 35 D9 67 61 DD 60 29 72 A2 19 65 C8 90 EF D3 00 78 58 7B 6F 3B 5E 01 8A 9F C0 2F 7C 61 0C 32 94 2F 70 56 17 F5 CB
Public Key Info
Key Algorithm: RSA
Key Parameters: 05 00
Key Size: 1024
Key SHA1 Fingerprint: E7 F9 46 F4 16 40 99 E2 17 09 9A 64 CF 88 4B 1C 4D 58 F2 F6
Public Key: 30 81 89 02 81 81 00 D4 77 6C DA 35 B0 5C 05 46 79 FD 3A EC F7 92 24 5F E1 F4 19 E8 62 54 DD CA 4C 74 94 14 C3 73 DD BF 24 BB EE AB 49 49 93 2B 6A 96 5D 54 47 89 07 98 5E 2F C2 A4 24 C1 CA 8E 2B 4D F0 93 CA 83 2B C7 E1 E8 CD 77 3D 88 6F 3C 45 CF D3 6A 33 B2 E2 F7 BE A1 3C 85 C0 AF 6B 60 7D 1D 59 CE 3D 8D 7B 42 89 37 EE B6 10 FB 27 B1 B3 03 79 7A 1D 3E F7 79 DD 74 46 B5 3F 21 E0 11 0F 02 0C A0 89 69 65 02 03 01 00 01
Key Usage
Usage: Digital signature
Key encipherment
Data encipherment
Critical: Yes
Subject Key Identifier
Key Identifier: 97 23 CD 71 1E BC C1 03 20 4B EE 42 24 FB A6 E1 09 63 BD FB
Critical: No
Extension
Identifier: 2.5.29.31
Value: 30 31 30 2F A0 2D A0 2B 86 29 68 74 74 70 3A 2F 2F 63 72 6C 2E 67 65 6F 74 72 75 73 74 2E 63 6F 6D 2F 63 72 6C 73 2F 73 65 63 75 72 65 63 61 2E 63 72 6C
Critical: No
Extension
Identifier: 2.5.29.35
Value: 30 16 80 14 48 E6 68 F9 2B D2 B2 95 D7 47 D8 23 20 10 4F 33 98 90 9F D4
Critical: No
Extended Key Usage
Allowed Purposes: Server Authentication
Client Authentication
Critical: No

Changed in empathy (Ubuntu):
status: New → Confirmed
Revision history for this message
Omer Akram (om26er) wrote :
Changed in empathy (Ubuntu):
importance: Undecided → High
tags: added: regression-release
Changed in empathy (Ubuntu):
importance: High → Medium
Revision history for this message
Timo Reimerdes (timorei) wrote :

Also happens for facebook chat and jabber.ccc.de - I guess it's all certificates that somehow are messed up?

Also - checking the "Remember this" checkbox doesn't have an effect on this.

Revision history for this message
komputes (komputes) wrote :

Colleagues testing Oneric Beta have reported to me that they get this error using Jabber. I am able to reproduce it every time.

Changed in empathy (Ubuntu):
status: Confirmed → Triaged
Revision history for this message
shoo_ash (ash-mail) wrote :

Keep getting the same error with Gtalk - Empathy on Oneiric beta with all updates installed. "Remember the choice for future connections" mark has no effect.

Revision history for this message
Zak B. Elep (zakame) wrote :

Confirming here on latest Oneiric upgrade today. Affects Google AFYD Talk as well. Yahoo and ICQ seem unaffected.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.