DaemonForums  

Go Back   DaemonForums > Miscellaneous > Guides

Guides All Guides and HOWTO's.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 19th January 2009
TerryP's Avatar
TerryP TerryP is offline
Arp Constable
 
Join Date: May 2008
Location: USofA
Posts: 1,547
Thanked 112 Times in 104 Posts
Default Pidgin MSN connection issues, invalid SSL Certificate chain

I recently had an issue with MSN under Pidgin on my 7-Stable system, and another user came up with a similiar issue under Gentoo GNU/Linux. The MSN account refused to login, sighting the following SSL Certificate related error in a popup:

Code:
'The certificate chain presented for contacts.msn.com is not valid.'
Thanks to the kind people in #Pidgin, I managed to find the Debug Window. I must be stupid, of course help -> debug window is a helpful thing, not a 'tool' ^_^. Quick look around the debug window yielded more useful information:

Code:
(21:44:03) gnutls: Attempting to load X.509 certificate from /usr/home/Terry/.purple/certificates/x509/tls_peers/contacts.msn.com
(21:44:03) certificate/x509/tls_cached: Peer cert did NOT match cached
After being pointed towards the GTE CyberTrust Global Root CA, I managed to find it via google here. A quick move of it into /usr/local/purple/ca-certs/ and bingo. My guess is the old certificate in pidgins folder is outdated, hence the miss match.

MSN works again for the time being, posted in case any other sap gets it.
__________________
My Journal

Thou shalt check the array bounds of all strings (indeed, all arrays), for surely where thou typest ``foo'' someone someday shall type ``supercalifragilisticexpialidocious''.
Reply With Quote
  #2   (View Single Post)  
Old 25th January 2009
boxofrox boxofrox is offline
New User
 
Join Date: Jan 2009
Posts: 1
Thanked 0 Times in 0 Posts
Default

Thanks for the info.

My solution to the same problem is different, though, if anyone is interested.
  1. I removed the msn certificate files
    Code:
    $ cd ${HOME}/.purple/certificates/x509/tls_peers
    $ rm contacts.msn.com login.live.com
    If you're not comfortable with removing the files, simply copy them to another folder like ~/tmp.
  2. Open pigdin debug window: Help -> Debug Window
  3. Open pidgen account manager: Accounts -> Mange Accounts
  4. Disable the MSN account, then enable the MSN account: Enabled checkbox
  5. The debug window showed pidgin connecting to msn, downloading the certificates and saving them to login.live.com and contacts.msn.com.
Reply With Quote
  #3   (View Single Post)  
Old 16th February 2009
t3odor t3odor is offline
New User
 
Join Date: Feb 2009
Posts: 1
Thanked 0 Times in 0 Posts
Default

It seems like problem with retrieving the certificate at first time. Try switching to Http-method from MSN account options and log on once.. This worked for me, and as certificate is once received you should be able to switch back to normal mode.
Reply With Quote
  #4   (View Single Post)  
Old 19th November 2010
sourcefield sourcefield is offline
New User
 
Join Date: Nov 2010
Posts: 1
Thanked 0 Times in 0 Posts
Default

deleting is not always works ,for some reason.
In some cases it's required to download certificate
sourcefield.blogspot.com/2010/11/certificate-for-omegacontactsmsncom.html
Reply With Quote
  #5   (View Single Post)  
Old 7th December 2010
PeterA650 PeterA650 is offline
New User
 
Join Date: Dec 2010
Posts: 1
Thanked 0 Times in 0 Posts
Default

Another workaround I just discovered: Pidgin seems to refresh omega.contacts.msn.com periodically, but it arrives with CRLFs (DOS style). Running dos2unix on it and restarting pidgin fixed the problem for me.
Reply With Quote
  #6   (View Single Post)  
Old 8th December 2010
DutchDaemon's Avatar
DutchDaemon DutchDaemon is offline
Real Name: Ben
Spam Refugee
 
Join Date: Jul 2008
Location: Rotterdam, The Netherlands
Posts: 337
Thanked 32 Times in 30 Posts
Default

You really should not have any more problems with the latest versions of libpurple and pidgin.
Reply With Quote
Reply

Tags
msn, pidgin, ssl certificate

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
mount-msdosfs /dev/dao: : Invalid argument harold FreeBSD General 5 12th December 2010 06:59 AM
pidgin (py25-gtk) wont upgrade mururoa FreeBSD Installation and Upgrading 3 7th September 2009 07:45 PM
pidgin amsn kopete gosha General software and network 2 2nd June 2009 10:08 PM
Mount DVD - invalid argument. maxrussell FreeBSD General 17 7th January 2009 08:46 AM
Yahoo! related Pidgin problems... BSDfan666 General software and network 10 28th September 2008 02:39 AM


All times are GMT. The time now is 11:20 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick