GNU bug report logs - #47331
Psi (and Psi-plus) aren't able to validate certificates

Previous Next

To reply to this bug, email your comments to 47331 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Jack Hill <jackhill <at> jackhill.us>
To: bug-guix <at> gnu.org
Cc: Raghav Gururajan <rg <at> raghavgururajan.name>
Subject: Psi (and Psi-plus) aren't able to validate certificates
Date: Mon, 22 Mar 2021 19:50:20 -0400 (EDT)

[Message part 1 (text/plain, inline)]

Hi Guix,

I'm using Guix System with commit 17b408e6a219d64643717cfde16ce04eea0a4590 
and both the psi and psi-plus package are unable to validate the 
certificate of the XMPP server when connecting. When logging into an 
account, a popup error appears saying "The member.fsf.org certificate 
failed the authenticity test. Invalid CA certificate." Clicking on 
"details…" results in the attached screenshot. It appears that a valid 
certificate is being presented by the server, but psi doesn't have 
certificate authority in its trust store. I've tried it with both psi 
installed in my default user profile and nss-certs installed in the system 
profile as well and with `guix environment --ad-hoc psi nss-certs -- psi`.

My environment variable appear to be set correctly:

jackhill <at> alperton ~$ env|grep -i ssl
GIT_SSL_CAINFO=/etc/ssl/certs/ca-certificates.crt
SSL_CERT_DIR=/run/current-system/profile/etc/ssl/certs
SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt

The problem appears across different XMPP servers. I've tried the ones 
for member.fsf.org, duke.edu, and hcoop.net. The IM Observatory doesn't 
report any problems with the configuration of member.fsf.org [0]. I see 
the exact same problem and error messages with both psi and psi-plus.

[0] https://www.xmpp.net/result.php?id=1481007

Best,
Jack

[psi.png (image/png, attachment)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.