How to fix SSL Certificate Problem in Pidgin and MSN

Sponsored Link
Just did an auto update. Among the list of things was an SSL update and now I can no longer connect to my MSN account in Pidgeon. I get an error "unable to validate certificate, the certificate for Omega.contacts.msn.com could not be validated. The certificate chain present is invalid."


Solution 1

How to replace your certficate (the GUI method):

Go to pidgin's Tools->Certificates to remove the old certificate. Don't close this window yet. (You can, but it is easier to not)

With your browser, go to https://omega.contacts.msn.com. It will give you "Directory Listing Denied"

With Firefox, if you click on the lock in the lower right corner, you get a dialog box, where you can click on View Certificate. On its Details tab, you can export the certificate to a file.

Now, back on the pidgin Tools->Certificates dialog, you can add this certificate

Solution 2

1. Close Pid­gin
2. Find your cer­tifi­cates folder (Win­dows: %appdata%\.purple) (Linux: /home/.purple)
3. Delete every­thing in the cer­tifi­cate folder.
4. Restart pid­gin and even­tu­ally you should get a new cer­tifi­cate that works.

P.S: Win­dows users who aren’t fami­lar with %app­data% just type %appdata%\.purple in your address bar and press enter.

Solution 3

The first thing is to remove the invalid cer­tifi­cate. This can be done from Tools->Certificates.

After that, you might try to just recon­nect and it might get a valid cer­tifi­cate, and you are done.

In case you are not, if run­ning on Linux, you can do:

echo QUIT | openssl s_client –con­nect omega?.con?tacts?.msn?.com:443 | openssl x509 > omega?.con?tacts?.msn?.com

And copy that file to: ~/.purple/certificates/x509/tls_peers

If you use windows 7

Go to C:\Users\{USER}\AppData\Roaming\.purple\certificates\x509\tls_peers\

delete the omega?.con?tacts?.msn?.com file and restart pidgin

Source from here

Sponsored Link

Incoming search terms:

Related posts

17 thoughts on “How to fix SSL Certificate Problem in Pidgin and MSN

  1. Thanks for this,
    I had the same problem happen earlier this week. Until I came across this I even tried install MSN Live Messenger. Big mistake. I’m happy to have pidgin running again.

    [Reply]

  2. Thank you for this. It was beginning to drive me a little batty. Solution 2 worked like a charm on my Win 7 box.

    [Reply]

  3. Thanks, I followed step one and before I got to importing the certificate pidgin had loaded the correct certificate. All I had to do was delete the bad one and wait a sec for it to download the correct one.

    [Reply]

  4. thx for sending this, but its not working for me, i just keep getting the same message over and over again. im using ubuntu 10.04 and i followed all the steps of all the solutions and none worked for me :S

    [Reply]

  5. I found that this worked great for me…

    sudo apt-get remove pidgin
    sudo apt-get autoremove
    sudo apt-get install pidgin

    Just reinstall pidgin and make sure to autoremove to clean up the crumbs and it works. at least for me it did.

    [Reply]

  6. worked perfect, on WinXP it does take some time after deleting for the omega file to re-appear. (+5 minutes on my machine)

    [Reply]

  7. Hmm nothing works for me. I tried all the options and even removing the ~/.purple folder and reinstalling Pidgin.

    [Reply]

  8. There is an easy way of doing this on windows.

    How to replace your certficate (the GUI method):

    Go to pidgin’s Tools->Certificates to remove the old certificate. Don’t close this window yet.

    (You can, but it is easier to not)

    With your browser, go to https://omega.contacts.msn.com. It will give you “Directory Listing Denied”

    With Firefox, if you click on the lock in the lower right corner, you get a dialog box, where you can click on View Certificate. On its Details tab, you can export the certificate to a file.

    After exporting the file to the SSL Server list by clicking add. Find the file and select and click ok. Done

    [Reply]

Leave a comment

Your email address will not be published. Required fields are marked *