search

psychs / limechat

IRC Client for Mac
http://limechat.net/mac/
1.55k stars 266 forks source link

OSStatus error -9807 when using self-signed SSL #319

Open prune998 opened 4 years ago

prune998 commented 4 years ago

It seems Limechat behaviour changed in 2.45. I used to connect to a ZNC proxy which is using a self-signed SSL certificate. It's not working anymore after the upgrade.

I tried re-generating the SSL cert (using cfssl) to comply with latest SSL requirements from OSX. I also tried using Xchat, which works. Xchat does have an option to allow self-signed (untrusted) SSL certs... but I can't find this option on Limechat.

I imported the remote CA and trusted it: fail I imported the remote intermediate-CA and trusted it: fail

I had to import the server certificate and trust it to have SSL working again.

prune998 commented 4 years ago

I tried adding sslCertificateVerification=NO to the plist with no success...

kambiz-aghaiepour commented 4 years ago

When you say "I had to import the server certificate and trust it to have SSL working again." how did you do that? I have the same issue.

kambiz-aghaiepour commented 4 years ago

Ok, so it looks like it is sufficient to point Safari to https://(your znc server):(your znc port)/ and visit the site and instruct it to trust the server cert. This will place the certificate into the MacOS keychain (verified in the Keychain Access app) as trusted. And Limechat 2.4.5 will work again.

prune998 commented 4 years ago

That's good news, but Limechat should work with self-signed out of the box (at is was before)

cyberpower678 commented 4 years ago

Well it's not working for me. I'm getting this error as of today too. Safari accepts it no problem, but LimeChat does not.

jameshilliard commented 4 years ago

This is fixed by updating to version 2.46 which is now the latest version in the app store it appears. There's now a checkbox to enable/disable certificate validation under server properties.

cyberpower678 commented 4 years ago

Downloaded. Working.