Thread: Office Communicator OCS on Maemo Conversations
View Single Post
otto is offline otto
2011-01-19 , 07:35
Posts: 8 | Thanked: 10 times | Joined on Aug 2010
#5
As jpalko mentioned, it is not recommended to use server certificates on /usr/share/purple/ca-certs/ directory. Instead of, remove your company certificate (sip.company.com) from ~/.purple/certificates/x509/tls_peers/ and run pidgin
Code:
$ pidgin --debug >pidgin_output.txt 2>&1
Fill in your company settings and connect. When pidgin prompts for server certificate, discard it.

In my understanding, you don't need the server certificate if you have proper ca certs (your servers certificates are created using ca certs [someone correct me if I'm wrong]). Discarding server certificate will cause pidgin to print missing ca certs debug info to output log.

Grep from pidgin output log for missing ca certs
Code:
cat pidgin_output.txt |grep "not found"
for example.

Now you should see what ca cert(s) you are missing and you can download missing certificate from https://www.digicert.com and save them to /usr/share/purple/ca-certs/ directory.

In my case I did:
Code:
cd /usr/share/purple/ca-certs/

wget https://www.digicert.com/testroot/DigiCertHighAssuranceEVRootCA.crt
 

The Following 2 Users Say Thank You to otto For This Useful Post: