Description of problem: By default, weechat does not point to the default Fedora CA certificate file. The WeeChat default is /etc/ssl/certs/ca-certificates.crt but on Fedora, the ca-certificates packages put the certs in /etc/pki/tls/certs/ca-bundle.crt This can be easily fixed with a user defined WeeChat setting, for example: /set weechat.network.gnutls_ca_file /etc/pki/tls/certs/ca-bundle.crt Version-Release number of selected component (if applicable): weechat-1.0.1-1.fc20.i686 How reproducible: always Steps to Reproduce: With a default WeeChat configuration, 1. start weechat 2. connect a SSL enabled IRC server, for example: /connect chat.freenode.org/7000 -ssl Actual results: Connection fails with the message: [...] gnutls: peer's certificate is NOT trusted gnutls: peer's certificate issuer is unknown Expected results: Connection succeed in SSL/TLS with good certificate verification. Proposed fix: The default CA file can be changed at build time with the CA_FILE variable. When building with CMake, the fix is just adding "-DCA_FILE=/etc/pki/tls/certs/ca-bundle.crt" on the cmake command line in the spec file. Additional info: When testing with chat.freenode.org the SSL connection sometimes fails for other reasons which is not related to this issue. Thanks.
Typo in description: for testing, use "chat.freenode.net" instead of "chat.freenode.org".
Thanks for reporting this! Fix on the way..
weechat-1.0.1-2.fc21 has been submitted as an update for Fedora 21. https://admin.fedoraproject.org/updates/weechat-1.0.1-2.fc21
weechat-1.0.1-2.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/weechat-1.0.1-2.fc20
weechat-1.0.1-2.el7 has been submitted as an update for Fedora EPEL 7. https://admin.fedoraproject.org/updates/weechat-1.0.1-2.el7
Package weechat-1.0.1-2.el7: * should fix your issue, * was pushed to the Fedora EPEL 7 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=epel-testing weechat-1.0.1-2.el7' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-EPEL-2014-3565/weechat-1.0.1-2.el7 then log in and leave karma (feedback).
weechat-1.0.1-2.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.
weechat-1.0.1-2.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.
weechat-1.0.1-2.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report.