Comment # 5 on bug 939743 from
(In reply to Bernhard Wiedemann from comment #2)
> guessing:
> did the jabber server use a cert signed by an official CA?
> otherwise, the update could have removed your CA from /etc/ssl/certs
> 
> you could also try
> openssl s_client -CApath /etc/ssl/certs -connect $JABBERSERVER:5223


I ran the command and received a return below:

CONNECTED(00000003)
---
Certificate chain
 0 s:/CN=jabber.abix
   i:/CN=jabber.abix
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/CN=jabber.abix
issuer=/CN=jabber.abix
---
No client certificate CA names sent
---
SSL handshake has read 1340 bytes and written 555 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-SHA384
    Session-ID:
55B8C608EFDAB478BC1AC0CE6D8639E51C50A91CE77D889571B63AE2A129B436
    Session-ID-ctx:
    Master-Key:
D1D45800951843DE9F6D845D013A5429FBDFE7C323B0BE09126E2184D4158D04781F19A71B833BBEED44F090FB9879CA
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1438172684
    Timeout   : 300 (sec)
    Verify return code: 18 (self signed certificate)


You are receiving this mail because: