How to fix SSL Certificate Problem in Pidgin and MSN

Sponsored Link
Just did an auto update. Among the list of things was an SSL update and now I can no longer connect to my MSN account in Pidgeon. I get an error "unable to validate certificate, the certificate for Omega.contacts.msn.com could not be validated. The certificate chain present is invalid."


Solution 1

How to replace your certficate (the GUI method):

Go to pidgin's Tools->Certificates to remove the old certificate. Don't close this window yet. (You can, but it is easier to not)

With your browser, go to https://omega.contacts.msn.com. It will give you "Directory Listing Denied"

With Firefox, if you click on the lock in the lower right corner, you get a dialog box, where you can click on View Certificate. On its Details tab, you can export the certificate to a file.

Now, back on the pidgin Tools->Certificates dialog, you can add this certificate

Solution 2

1. Close Pid­gin
2. Find your cer­tifi­cates folder (Win­dows: %appdata%\.purple) (Linux: /home/.purple)
3. Delete every­thing in the cer­tifi­cate folder.
4. Restart pid­gin and even­tu­ally you should get a new cer­tifi­cate that works.

P.S: Win­dows users who aren’t fami­lar with %app­data% just type %appdata%\.purple in your address bar and press enter.

Solution 3

The first thing is to remove the invalid cer­tifi­cate. This can be done from Tools->Certificates.

After that, you might try to just recon­nect and it might get a valid cer­tifi­cate, and you are done.

In case you are not, if run­ning on Linux, you can do:

echo QUIT | openssl s_client –con­nect omega?.con?tacts?.msn?.com:443 | openssl x509 > omega?.con?tacts?.msn?.com

And copy that file to: ~/.purple/certificates/x509/tls_peers

If you use windows 7

Go to C:\Users\{USER}\AppData\Roaming\.purple\certificates\x509\tls_peers\

delete the omega?.con?tacts?.msn?.com file and restart pidgin

Source from here

Sponsored Link

You may also like...

17 Responses

  1. Tim says:

    Thanks for this,
    I had the same problem happen earlier this week. Until I came across this I even tried install MSN Live Messenger. Big mistake. I’m happy to have pidgin running again.

  2. Karyn says:

    Thanks, solution #3 worked for me.

  3. Antony_256 says:

    Permanent solution (unless microsoft screws up again) from the developers:
    http://developer.pidgin.im/ticket/12906#comment:39

  4. Matt says:

    Thank you for this. It was beginning to drive me a little batty. Solution 2 worked like a charm on my Win 7 box.

  5. mike says:

    Solution 2 worked for me, thanks!

  6. Tom says:

    Thanks, I followed step one and before I got to importing the certificate pidgin had loaded the correct certificate. All I had to do was delete the bad one and wait a sec for it to download the correct one.

  7. KhaledG says:

    thx for sending this, but its not working for me, i just keep getting the same message over and over again. im using ubuntu 10.04 and i followed all the steps of all the solutions and none worked for me :S

  8. Neetesh says:

    Thanks for this wonderful tutorial. This helped me.

  9. spartageek says:

    I found that this worked great for me…

    sudo apt-get remove pidgin
    sudo apt-get autoremove
    sudo apt-get install pidgin

    Just reinstall pidgin and make sure to autoremove to clean up the crumbs and it works. at least for me it did.

  10. henk says:

    worked perfect, on WinXP it does take some time after deleting for the omega file to re-appear. (+5 minutes on my machine)

  11. Tedel says:

    Method #1 worked for me. I’m using Mandriva Linux 2010.1

  12. Christian says:

    Hmm nothing works for me. I tried all the options and even removing the ~/.purple folder and reinstalling Pidgin.

  13. dayu says:

    Thanks,
    solution #1 worked for me

  14. Bruno says:

    Method #1 worked for me. I’m using Ubuntu Linux 9.10 (Karmic Koala)

  15. Fou says:

    There is an easy way of doing this on windows.

    How to replace your certficate (the GUI method):

    Go to pidgin’s Tools->Certificates to remove the old certificate. Don’t close this window yet.

    (You can, but it is easier to not)

    With your browser, go to https://omega.contacts.msn.com. It will give you “Directory Listing Denied”

    With Firefox, if you click on the lock in the lower right corner, you get a dialog box, where you can click on View Certificate. On its Details tab, you can export the certificate to a file.

    After exporting the file to the SSL Server list by clicking add. Find the file and select and click ok. Done

  16. djchester says:

    great guide! only needed solution nr one. 🙂

  17. Steve Austin says:

    Solution #1 worked for me..thanks!

Leave a Reply

Your email address will not be published. Required fields are marked *