#642298 libloudmouth1-0: Can't specify user-trusted certificates

Package:
libloudmouth1-0
Source:
loudmouth
Description:
Lightweight C Jabber library
Submitter:
Laurent Fousse
Date:
2011-09-21 09:58:28 UTC
Severity:
wishlist
#642298#5
Date:
2011-09-21 09:57:47 UTC
From:
To:
Hello,

In Debian, loudmouth is compiled with GnuTLS support and a hard-coded
root CA certificate file, which is the system file
/etc/ssl/certificates.crt. There is AFAICT no provision to let the
user manually trust a certificate when first seen, or to have a
user-specified directory of trusted cert files (as the SSL_CERT_DIR
environment variable is used in OpenSSL).

The net result is that the official workaround suggested in mcabber's
documentation when using a self-signed certificate is to skip
certificates validation entirely.

Laurent.