https://bugzilla.wikimedia.org/show_bug.cgi?id=21296

T. Gries <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|[CLARIFICATION REQUEST]     |[SSL] OpenID not working
                   |Login by OpenID not working |with my OpenID combined
                   |for non-ASCII identities,   |with a CAcert.org
                   |or for OpenID server pages  |Certificate
                   |without character set       |
                   |information                 |

--- Comment #8 from T. Gries <[email protected]> ---
(In reply to comment #0)
> is not working with my OpenID (combined with a CAcert.org Certificate)
> http://certifi.ca/andreasbürki
> 
> Maybe somewhere is a UTF-8 problem or whatever. - Sorry, I'm not a

It has only to do with the certificate. When you use a certificate by the Web
of Trust certificate authority CAcert.org (for example), please be informed,
that standard operating systems do not have the root or intermediate
certificates for CAcert.org installed.

The OpenID extension makes extensive use of curl operations which fail with
certificate errors unless you use a switch --no-certificate-check, which one
should never do. The correct way is to install the CAcert.org certificate on
the server. 

The CA certificate can be downloaded from http://www.cacert.org/index.php?id=3
and look for "How do you add a Certificate Authority to <your operating
system>". 

Linux systems require usually the addition of a hash of the CA certificate to
/etc/ssl/certs with a symbolic link to the CA certificate itself. The
additional certificates are located in /usr/local/share/ca-certificates . The
actual directories may differ.

See for example
http://superuser.com/questions/437330/how-do-you-add-a-certificate-authority-to-ubuntu
.

I hope to have given a description which is detailed enough and are now closing
this bug as resolved invalid. Please reopen if you feel a need.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to