Re: Problems with my account in pidgin

[David Woolley]

On 12/11/2021 22:37, David Woolley wrote:


For background on the concepts referred to above, 
 
may be useful.


Although I haven't translated and checked it, I think this Russian 
Wikipedia article also covers the concepts: 
 
(Цепочка доверия).


___
Support@pidgin.im mailing list
Want to unsubscribe?  Use this link:
https://lists.pidgin.im/listinfo/support

Re: Problems with my account in pidgin

[David Woolley]

On 12/11/2021 13:40, 2...@tuta.io wrote:

15:38:16) dnssrv: Couldn't look up SRV record. DNS-имя не существует. (9003).a


This isn't an error.  The domain name you gave does not have SRV 
records, but it got beyond this point.



(15:38:52) nss: partial certificate chain


I was hoping someone more familiar with this aspect of Pidgin was going 
to answer, but really you need help from someone you trust, as this 
relates to the mechanisms that are used to ensure you are really talking 
to the server, not to an impostor who is then forwarding things to the 
server.


It appears that only IRC and XMPP use this.  I'm guessing that you are 
trying to access an IRC server run by voxi.ru, but if it is actually an 
XMPP one, please let us know.


The could mean:

1) someone is pretending to be the server and hoping you won't check 
properly or will override security warnings;


2) Pidgin never had the CA certificate needed to verify the server - was 
it working before;


3) The server has updated its server certificate which is now signed by 
a new CA certificate (you may want to check you have the latest  Pidgin 
and have current security updates for your OS - this might be the case 
if they were using a Lets Encrypt certificate, as there was a recent, 
relatively chaotic, retirement of one of their CA certificates;


4) The server has a certificate that is signed by an intermediate 
certificate, which they haven't sent to you, and which you didn't 
already have.


There will be differences in how to add a missing CA certificate on your 
side, depending on the OS, so you should tell us what that is, and as 
you shouldn't take information from lightly used mailing lists at face 
value, you really need someone you can trust to make sure that you don't 
compromise your machine by adding a certificate that you shouldn't trust 
to the extent necessary for your personal security needs.


For background on the concepts referred to above, 
 
may be useful.




___
Support@pidgin.im mailing list
Want to unsubscribe?  Use this link:
https://lists.pidgin.im/listinfo/support

Re: Problems with my account in pidgin

[David Woolley]

On 12/11/2021 13:03, 2...@tuta.io wrote:

Every time I get this mistake. It`s logging in every time and got 
mistakehttp://joxi.ru/52a7QpOfgPlOQr


Generally account problems need to be taken up with the account 
provider, which is never the Pidgin support organisation.


Also, your report doesn't seem to be complete.  Please explain the 
expected behaviour and how the actual behaviour differs.  We know 
nothing of your service provider and how they should behave.


___
Support@pidgin.im mailing list
Want to unsubscribe?  Use this link:
https://lists.pidgin.im/listinfo/support