Empathy TLS error

[haggholm]

When trying to connect to Google Talk from Empathy, I get an SSL error complaining about the certificate, which is allegedly

invalid2.invalid
Identity: invalid2.invalid
Verified by: invalid2.invalid
Expires: 01/01/30

This looks like the same kind of thing (caused by TLS 1.3?) as https://bugs.launchpad.net/ubuntu/cosmic/+source/fetchmail/+bug/1798786 (see also https://bugzilla.redhat.com/show_bug.cgi?id=1611815).

[Robie Basak (racb)]

Thank you for taking the time to report this bug and helping to make Ubuntu better.

I'm not sure why this is filed against fetchmail?

You also haven't stated what version of empathy you're running nor what Ubuntu release you're running.

Changing the bug task to empathy for now, but marking it as Incomplete.

Unfortunately, we cannot work on this bug because your description didn't include enough information. You may find it helpful to read "How to report bugs effectively" http://www.chiark.greenend.org.uk/~sgtatham/bugs.html. We'd be grateful if you would then provide a more complete description of the problem. Once done, please change the bug status back to New.

[Jennifer Richards (jennifer-k)]

This affects me as of updating to 18.10. All Google Talk accounts complain that the connection is untrusted. The certificate details show a CN of "invalid2.invalid" and an OU of "No SNI provided; please fix your client."

This completly blocks use of Empathy with Google Talk, as even trying to accept the untrusted connection fails to connect.

I traced this down last week and I believe this is caused by making a request using TLS1.3 without specifying the SNI properly. Google has apparently decided not to play along, instead rejecting such clients. This suggests that Empathy is incorrectly using TLS.