Installing CAcert’s Root Certificate in Psi on Mac OS X
I’m using the Psi instant messenger (version 0.10) on Mac OS X 10.4.8 with a Jabber server that has an SSL certificate signed by CAcert. Their root certificate isn’t installed in Psi by default, however, so I got a warning message about an invalid certificate each time I connected to my server. I followed these steps to get the CAcert certificates into Psi:
- Download the class 1 and class 3 certificates from the CAcert root certificate page in PEM format.
- Run the following command in Terminal:
openssl x509 -in root.crt -fingerprintThe first output line shows the MD5 fingerprint. Verify it against the fingerprint on the root certificate page.
- Open Psi’s
rootcert.xmlfile in an editor. In a standard installation, the path is
- Add two new
<certificate>elements and inside each a
- Edit the
class3.crtdownloaded in step 1. In each file, remove the first and last line and all newline characters. This results in one long line of gibberish each. :-)
- Copy each of the modified certificates into one of the
<data>elements created in
rootcert.xmlin step 4.
- Start Psi. The warning about an invalid certificate has disappeared.
Trackbacks are closed for this story.