Cannot connect to a server with self-signed certificate by IP address
Versions
- OS: Manjaro
- Gajim version: 1.2.2
- GTK version: 3.24.24
- Python-nbxmpp version: 1.0.2
Steps to reproduce the problem
- Add an account to connect to a server by IP address (no DNS name available) with START TLS.
- Try to connect
- Add server certificate to trusted certificates when prompted
Expected behavior
Connection established after adding a certificate to trusted.
Actual behavior
There is an SSL Certificate Verification Error dialog appearing in an infinite loop even though the certificate is already in trusted storage.
In logs, there is the message from nbxmpp.connection
saying that two verification errors occurred:
- G_TLS_CERTIFICATE_UNKNOWN_CA
- G_TLS_CERTIFICATE_BAD_IDENTITY
While CA error is kind of expected (ignoring the fact that the certificate was added to trusted), bad identity error is confusing, because certificate subject is exactly the same as server IP address.