[irssi-xmpp] SSL CA certificate problem with irssi-xmpp

[Juhani Eronen <exec@ee.oulu.fi>]

Hello, 

I have tried to use irssi-xmpp with an SSL XMPP server, but I have had
problems with the self-signed SSL CA certificate of the chat site I'm
using.

With the irssi-xmpp-plugin version bundled with Ubuntu Hardy, the
connection fails as follows:

12:01 -!- Irssi: Reloaded configuration
12:01 -!- Irssi: Looking up im.x
12:01 -!- Irssi: Connecting to im.x [] port 5223
12:01 -!- SSL: Certificate is not trusted! 
12:01 -!- Irssi: Connection to im.x established
12:01 -!- Irssi: Connection lost to im.x

With the irssi-xmpp-plugin version bundled with Ubuntu Karmic, the
connection succeeds, but emits a warning:

12:41 -!- Irssi: Looking up im.x
12:41 -!- Irssi: warning SSL (im.x): certificate is not trusted
12:41 -!- Irssi: Connecting to im.x [] port 5223
12:41 -!- Irssi: Authenticated successfully. 
12:41 -!- Irssi: Requesting the roster. 
12:41 -!- Irssi: Connection to im.x established

I tried compiling the latest version of irssi-xmpp from the
cybione.org website, but it produced the same effect. (More accurate
version information of the setup included under the sig)

I have tried to use various settings related to SSL certificates as
detailed in IRSSI documentation, but the error messages remain the
same.

http://www.irssi.org/documentation/settings

ssl_cacert =
ssl_cafile =
ssl_cert =
ssl_verify =

The question is: How do I tell irssi where to find the CA certificate
it should validate the server certificate against? Other IM software
I've tried (Pidgin, iChat, Adium) have had no problems with the site
or the certificate.

A related concern is that connections to port 5222 seem to fail
consistently with irssi-xmpp, but succeed with other IM software. Have
you encountered similar issues?

-Jussi

Relevant part of my Irssi configuration is:

servers = (
  { address = "im.x"; 
    port="5223"; 
    use_ssl = "yes"; 
    chatnet = "x"; 
    password = "x"; 
    ssl_cafile = "/etc/ssl/certs/ca.x.crt";
  }
)

chatnets = {
  x = {
    type = "XMPP";
    nick = "x@im.x";
  };
};

Ubuntu Hardy version information:

$ cat /etc/issue
Ubuntu 8.04.3 LTS \n \l
$ dpkg --get-selections | grep irssi
irssi                      install
irssi-plugin-xmpp          install
$ apt-cache show irssi | grep Version
Version: 0.8.12-3ubuntu3.1
$ apt-cache show irssi-plugin-xmpp | grep Version 
Version: 0.13-1

Ubuntu Karmic version information:

$ cat /etc/issue
Ubuntu 9.10 \n \l
$ apt-cache show irssi | grep Version
Version: 0.8.14-1ubuntu1
$ apt-cache show irssi-plugin-xmpp | grep Version
Version: 0.13+cvs20090617-1