dialog for showing the server certificate should offer way to verify the cert

[bernhardreiter]

The dialog for showing the server certificate certificate and cert chain should offer a way to verify the certificate. This is useful for the usecase where the user is asked whether to trust that certificate.

How to reproduce?

Either remove the root ca from your xmmp server from your operating systems certificate store
and reconnect.

Or just click on the "padlock" icon on a connection and look at the dialog.

version

swift-im 4.0.2-1 wit official package on Debian GNU/Linux

[bernhardreiter]

Potential solutions

A standard solution would be to show a secure checksum to allow the user to compare it to other places where it is shown. Typically should would be the sha256sum or sha hash checksum as shown in browsers. (Not md5, because it is cryptographically unsafe.)

Another solution could be to allow the user to export the certificate to do an examination with other tools.