Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OSStatus error -9807 when using self-signed SSL #319

Open
prune998 opened this issue Jun 19, 2020 · 7 comments
Open

OSStatus error -9807 when using self-signed SSL #319

prune998 opened this issue Jun 19, 2020 · 7 comments

Comments

@prune998
Copy link

It seems Limechat behaviour changed in 2.45.
I used to connect to a ZNC proxy which is using a self-signed SSL certificate. It's not working anymore after the upgrade.

I tried re-generating the SSL cert (using cfssl) to comply with latest SSL requirements from OSX. I also tried using Xchat, which works.
Xchat does have an option to allow self-signed (untrusted) SSL certs... but I can't find this option on Limechat.

I imported the remote CA and trusted it: fail
I imported the remote intermediate-CA and trusted it: fail

I had to import the server certificate and trust it to have SSL working again.

@prune998
Copy link
Author

I tried adding sslCertificateVerification=NO to the plist with no success...

@kambiz-aghaiepour
Copy link

When you say "I had to import the server certificate and trust it to have SSL working again." how did you do that? I have the same issue.

@kambiz-aghaiepour
Copy link

kambiz-aghaiepour commented Jun 19, 2020

Ok, so it looks like it is sufficient to point Safari to https://(your znc server):(your znc port)/ and visit the site and instruct it to trust the server cert. This will place the certificate into the MacOS keychain (verified in the Keychain Access app) as trusted. And Limechat 2.4.5 will work again.

@prune998
Copy link
Author

That's good news, but Limechat should work with self-signed out of the box (at is was before)

@cyberpower678
Copy link

Well it's not working for me. I'm getting this error as of today too. Safari accepts it no problem, but LimeChat does not.

@jameshilliard
Copy link

This is fixed by updating to version 2.46 which is now the latest version in the app store it appears. There's now a checkbox to enable/disable certificate validation under server properties.

@cyberpower678
Copy link

Downloaded. Working.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants