[jitsi-users] Jit.si connection error


#1

Hi there,

recently (last 1-2 weeks) I get a warning when I try to connect to my
jit.si account using gajim. Gajim claims that the connection is
insecure.

Jitsi however connects without warning.

What is wrong there?

Regards,
Philipp


#2

No one gives a shit?

I tried with psi as well, and it does not connect either, so this
points to:
1. A secure connection to jit.si is not possible.
2. jitsi connects anyway although it should not (and no, the option to
connect to insecure networks is not checked).

jitsi-nightly 20140425 as well as jitsi-nightly-20140724


#3

Would you mind posting the exact reason why the other clients think the certificate is invalid? I'll try to inspect our cert anyway, but this info would help.

Freundliche Grüsse,
Ingo Bauersachs

-- sent from my mobile

···

Le 23.07.2014 à 22:48, "Philipp Überbacher" <murks@tuxfamily.org> a écrit :

Hi there,

recently (last 1-2 weeks) I get a warning when I try to connect to my
jit.si account using gajim. Gajim claims that the connection is
insecure.

Jitsi however connects without warning.

What is wrong there?

Regards,
Philipp

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users


#4

No one gives a shit?

Now now ... let's remain civil.

I tried with psi as well, and it does not connect either, so this
points to:
1. A secure connection to jit.si is not possible.
2. jitsi connects anyway although it should not (and no, the option to
connect to insecure networks is not checked).

Could you please explain exactly why you think Jitsi should not connect?

"Because Psi and Gajim don't" is not a reason and if you have
questions about why they behave in a certain way, their forums are
probably the best place to discuss it.

"Because there's this thing that is wrong with the jit.si cert" would
be a good reason, but I looked at the cert and it looks good to me.
Jitsi, Adium, Pidgin and Messages don't seem to have a problem with
it.

Emil

···

On Thu, Jul 24, 2014 at 9:06 AM, Philipp Überbacher <murks@tuxfamily.org> wrote:

jitsi-nightly 20140425 as well as jitsi-nightly-20140724

_______________________________________________
users mailing list
users@jitsi.org
Unsubscribe instructions and other list options:
http://lists.jitsi.org/mailman/listinfo/users

--
https://jitsi.org


#5

Hi Ingo.

So atm.:
psi and gajim work for a different account but not jit.si.
jitsi and pidgin work for both.

I tried to figure it out what the exact error is, but with limited
success. In psi I didn't find a debug feature or any useful messages.
Both clients try to connect for a long time. Gajim seems to connect for
several minutes until it pops up a warning window. I found a verbose
mode and at the end of the message you see what seems to be the relevant
output.

Regards,
Philipp

18:12:27 (I) gajim.c.x.transports_nb pollout called, state == CONNECTED
18:12:27 (I) gajim.c.x.transports_nb pollout called, state == CONNECTED
18:12:27 (I) gajim.c.x.transports_nb pollout called, state == CONNECTED
18:12:27 (I) gajim.c.x.transports_nb pollin called, state == CONNECTED
18:12:27 (D) gajim.c.x.tls_nb Recv: Caught OpenSSL.SSL.Error:
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/gajim/common/xmpp/tls_nb.py",
line 167, in recv retval = self.sslobj.recv(bufsize)
  File "/usr/lib/python2.7/site-packages/OpenSSL/SSL.py", line 995, in
recv self._raise_ssl_error(self._ssl, result)
  File "/usr/lib/python2.7/site-packages/OpenSSL/SSL.py", line 871, in
_raise_ssl_error _raise_current_error()
  File "/usr/lib/python2.7/site-packages/OpenSSL/_util.py", line 22, in
exception_from_error_queue raise exceptionType(errors)
Error: [('SSL routines', 'SSL23_GET_SERVER_HELLO', 'tlsv1 alert
internal error')] 18:12:27 (I) gajim.c.x.transports_nb _do_receive,
caught SSL error, got None: Traceback (most recent call last):
  File
"/usr/lib/python2.7/site-packages/gajim/common/xmpp/transports_nb.py",
line 568, in _do_receive received = self._recv(RECV_BUFSIZE) File
"/usr/lib/python2.7/site-packages/gajim/common/xmpp/tls_nb.py", line
186, in recv raise SSLWrapper.Error(self.sock or self.sslobj, e) Error:
<unprintable Error object> 18:12:27 (I) gajim.c.x.transports_nb
Connection to 130.79.91.169:5223 lost: [('SSL routines',
'SSL23_GET_SERVER_HELLO', 'tlsv1 alert internal error')] ([('SSL
routines', 'SSL23_GET_SERVER_HELLO', 'tlsv1 alert internal error')],)
Traceback (most recent call last): File
"/usr/lib/python2.7/site-packages/gajim/common/xmpp/transports_nb.py",
line 568, in _do_receive received = self._recv(RECV_BUFSIZE) File
"/usr/lib/python2.7/site-packages/gajim/common/xmpp/tls_nb.py", line
186, in recv raise SSLWrapper.Error(self.sock or self.sslobj, e) Error:
<unprintable Error object> 18:12:27 (I) gajim.c.x.plugin Plugging
<common.xmpp.tls_nb.NonBlockingTLS instance at 0xb4a27e0c> __OUT__ of
<common.xmpp.transports_nb.NonBlockingTCP instance at 0xb2aa9bec>.
18:12:27 (I) gajim.c.x.transports_nb NonBlockingTCP Connect :: About to
connect to 2001:660:4701:1001:230:48ff:fe8b:6b80:5223 18:12:27 (I)
gajim.c.x.transports_nb Plugging fd 12, W:True, R:False 18:12:27 (I)
gajim.c.x.idlequeue read timeout set for fd 12 on 30 seconds 18:12:27
(D) gajim.c.x.client_nb While looping over DNS A records: Exception
while connecting to 2001:660:4701:1001:230:48ff:fe8b:6b80:5223 - 101
Network is unreachable 18:12:27 (I) gajim.c.x.client_nb Disconnecting
NBClient: Run out of hosts for name jit.si:5223. Error for last IP:
Exception while connecting to
2001:660:4701:1001:230:48ff:fe8b:6b80:5223 - 101 Network is unreachable
18:12:27 (I) gajim.c.x.plugin Plugging
<common.xmpp.transports_nb.NonBlockingTCP instance at 0xb2aa9bec>
__OUT__ of <common.xmpp.client_nb.NonBlockingClient instance at
0xb37a63cc>. 18:12:27 (D) gajim.c.x.client_nb Client disconnected..
0xb37a63cc>18:12:27 (D) gajim.c.x.client_nb calling on_connect_failure
0xb37a63cc>cb 18:12:27 (I) gajim.c.connection >>>>>> Connecting to
0xb37a63cc>jit.si [swing.bluejimp.com:5222], type = plain 18:12:27 (I)
0xb37a63cc>gajim.c.x.plugin Plugging
0xb37a63cc><common.xmpp.transports_nb.NonBlockingTCP instance at
0xb37a63cc>0xb2fc0cac> __INTO__
0xb37a63cc>0xb2fc0cac> <common.xmpp.client_nb.NonBlockingClient
0xb37a63cc>0xb2fc0cac> instance at 0xb2fc0bec> 18:12:27 (I)
0xb37a63cc>0xb2fc0cac> gajim.c.x.transports_nb NonBlockingTCP
0xb37a63cc>0xb2fc0cac> Connect :: About to connect to
0xb37a63cc>0xb2fc0cac> 130.79.91.169:5222 18:12:27 (I)
0xb37a63cc>0xb2fc0cac> gajim.c.x.transports_nb Plugging fd 13, W:True,
0xb37a63cc>0xb2fc0cac> R:False 18:12:27 (I) gajim.c.x.idlequeue read
0xb37a63cc>0xb2fc0cac> timeout set for fd 13 on 30 seconds 18:12:27 (I)
0xb37a63cc>0xb2fc0cac> gajim.c.x.transports_nb After NB connect() of
0xb37a63cc>0xb2fc0cac> 3002862764. "Operation now in progress" raised
0xb37a63cc>0xb2fc0cac> => CONNECTING 18:12:27 (I) gajim.c.x.idlequeue
0xb37a63cc>0xb2fc0cac> read timeout removed for fd 12 18:12:27 (I)
0xb37a63cc>0xb2fc0cac> gajim.c.x.transports_nb pollend called, state ==
0xb37a63cc>0xb2fc0cac> DISCONNECTED 18:12:28 (I)
0xb37a63cc>0xb2fc0cac> gajim.c.x.transports_nb pollout called, state ==
0xb37a63cc>0xb2fc0cac> CONNECTING 18:12:28 (I) gajim.c.x.transports_nb
0xb37a63cc>0xb2fc0cac> 3002862764 socket wrapper connected
18:12:28 (I) gajim.c.x.idlequeue read timeout removed for fd 13
18:12:28 (I) gajim.c.x.transports_nb Plugging fd 13, W:False, R:False
18:12:28 (I) gajim.c.x.client_nb -------------xmpp_connect_machine() >>
mode: None, data: None... 18:12:28 (I) gajim.c.x.plugin Plugging
<common.xmpp.dispatcher_nb.XMPPDispatcher instance at 0xb2fc094c>
__INTO__ <common.xmpp.client_nb.NonBlockingClient instance at
0xb2fc0bec> 18:12:28 (D) gajim.c.x.dispatcher_nb Registering namespace
0xb2fc0bec> "unknown" 18:12:28 (D) gajim.c.x.dispatcher_nb Registering
0xb2fc0bec> protocol "unknown" as <class
0xb2fc0bec> 'common.xmpp.protocol.Protocol'>(unknown) 18:12:28 (D)
0xb2fc0bec> gajim.c.x.dispatcher_nb Registering protocol "default" as
0xb2fc0bec> <class 'common.xmpp.protocol.Protocol'>(unknown)
18:12:28 (D) gajim.c.x.dispatcher_nb Registering namespace
"http://etherx.jabber.org/streams" 18:12:28 (D) gajim.c.x.dispatcher_nb
Registering protocol "unknown" as <class
'common.xmpp.protocol.Protocol'>(http://etherx.jabber.org/streams)
18:12:28 (D) gajim.c.x.dispatcher_nb Registering protocol "default" as
<class
'common.xmpp.protocol.Protocol'>(http://etherx.jabber.org/streams)
18:12:28 (D) gajim.c.x.dispatcher_nb Registering namespace
"jabber:client" 18:12:28 (D) gajim.c.x.dispatcher_nb Registering
protocol "unknown" as <class
'common.xmpp.protocol.Protocol'>(jabber:client) 18:12:28 (D)
gajim.c.x.dispatcher_nb Registering protocol "default" as <class
'common.xmpp.protocol.Protocol'>(jabber:client) 18:12:28 (D)
gajim.c.x.dispatcher_nb Registering protocol "iq" as <class
'common.xmpp.protocol.Iq'>(jabber:client) 18:12:28 (D)
gajim.c.x.dispatcher_nb Registering protocol "presence" as <class
'common.xmpp.protocol.Presence'>(jabber:client) 18:12:28 (D)
gajim.c.x.dispatcher_nb Registering protocol "message" as <class
'common.xmpp.protocol.Message'>(jabber:client) 18:12:28 (D)
gajim.c.x.simplexml Preparing to handle incoming XML stream. 18:12:28
(I) gajim.c.x.transports_nb Plugging fd 13, W:True, R:True 18:12:28 (I)
gajim.c.x.client_nb setting RECEIVE_DOCUMENT_ATTRIBUTES on next receive
18:12:28 (I) gajim.c.x.transports_nb pollout called, state == CONNECTED
18:12:28 (I) gajim.c.x.transports_nb Plugging fd 13, W:False, R:True
18:12:28 (I) gajim.c.x.client_nb raising event from
transport: :::::DATA SENT:::: _____________ <?xml
version='1.0'?><stream:stream xmlns="jabber:client" to="jit.si"
version="1.0" xmlns:stream="http://etherx.jabber.org/streams"
xml:lang="en" > _____________

18:12:28 (D) gajim.c.ged stanza-sent
Args: (<common.connection_handlers_events.StanzaSentEvent object at
0xb4a27dcc>,) 18:12:28 (I) gajim.c.x.transports_nb pollin called, state
0xb4a27dcc>== CONNECTED
18:12:28 (I) gajim.c.x.idlequeue read timeout removed for fd 13
18:12:28 (I) gajim.c.x.client_nb raising event from
transport: :::::DATA RECEIVED:::: _____________
<?xml version='1.0' encoding='UTF-8'?><stream:stream
xmlns:stream="http://etherx.jabber.org/streams" xmlns="jabber:client"
from="jit.si" id="6c3017f3" xml:lang="en" version="1.0"> _____________

18:12:28 (D) gajim.c.ged stanza-received
Args: (<common.connection_handlers_events.StanzaReceivedEvent object at
0xb4a27dcc>,) 18:12:28 (I) gajim.c.x.client_nb
0xb4a27dcc>-------------xmpp_connect_machine() >> mode:
0xb4a27dcc>RECEIVE_DOCUMENT_ATTRIBUTES, data: <?xml version=‘1.0’ ...
18:12:28 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 1 , tag ->
stream:stream, attrs -> {u’xmlns’: u’jabber:client’, u’from’:
u’jit.si’, u’xml:lang’: u’en’, u’version’: u’1.0’, u’xmlns:stream’:
u’http://etherx.jabber.org/streams’, u’id’: u’6c3017f3’} 18:12:28 (I)
gajim.c.x.client_nb setting RECEIVE_STREAM_FEATURES on next receive
18:12:28 (I) gajim.c.x.transports_nb pollin called, state == CONNECTED
18:12:28 (I) gajim.c.x.idlequeue read timeout removed for fd 13
18:12:28 (I) gajim.c.x.client_nb raising event from
transport: :::::DATA RECEIVED:::: _____________
<stream:features><starttls
xmlns=“urn:ietf:params:xml:ns:xmpp-tls”></starttls><mechanisms
xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”><mechanism>DIGEST-MD5</mechanism><mechanism>PLAIN</mechanism><mechanism>CRAM-MD5</mechanism></mechanisms><compression
xmlns=“http://jabber.org/features/compress”><method>zlib</method></compression><auth
xmlns=“http://jabber.org/features/iq-auth”/><register
xmlns=“http://jabber.org/features/iq-register”/></stream:features>

···

On Thu, 24 Jul 2014 21:05:58 +0700 Ingo Bauersachs <ingo@jitsi.org> wrote:

Would you mind posting the exact reason why the other clients think
the certificate is invalid? I'll try to inspect our cert anyway, but
this info would help.

Freundliche Grüsse,
Ingo Bauersachs

_____________

18:12:28 (D) gajim.c.ged stanza-received
Args: (<common.connection_handlers_events.StanzaReceivedEvent object at
0xb2fc0dec>,) 18:12:28 (I) gajim.c.x.client_nb
0xb2fc0dec>-------------xmpp_connect_machine() >> mode:
0xb2fc0dec>RECEIVE_STREAM_FEATURES, data: <stream:features><st...
18:12:28 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 2 , tag ->
stream:features, attrs -> {} 18:12:28 (I) gajim.c.x.simplexml
STARTTAG.. DEPTH -> 3 , tag -> starttls, attrs -> {u'xmlns':
u'urn:ietf:params:xml:ns:xmpp-tls'} 18:12:28 (I) gajim.c.x.simplexml
DEPTH -> 3 , tag -> starttls 18:12:28 (I) gajim.c.x.simplexml
STARTTAG.. DEPTH -> 3 , tag -> mechanisms, attrs -> {u'xmlns':
u'urn:ietf:params:xml:ns:xmpp-sasl'} 18:12:28 (I) gajim.c.x.simplexml
STARTTAG.. DEPTH -> 4 , tag -> mechanism, attrs -> {} 18:12:28 (I)
gajim.c.x.simplexml DEPTH -> 4 , tag -> mechanism 18:12:28 (I)
gajim.c.x.simplexml STARTTAG.. DEPTH -> 4 , tag -> mechanism, attrs ->
{} 18:12:28 (I) gajim.c.x.simplexml DEPTH -> 4 , tag -> mechanism
18:12:28 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 4 , tag ->
mechanism, attrs -> {} 18:12:28 (I) gajim.c.x.simplexml DEPTH -> 4 ,
tag -> mechanism 18:12:28 (I) gajim.c.x.simplexml DEPTH -> 3 , tag ->
mechanisms 18:12:28 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 3 , tag
-> compression, attrs -> {u'xmlns':
u'http://jabber.org/features/compress'} 18:12:28 (I)
gajim.c.x.simplexml STARTTAG.. DEPTH -> 4 , tag -> method, attrs -> {}
18:12:28 (I) gajim.c.x.simplexml DEPTH -> 4 , tag -> method 18:12:28
(I) gajim.c.x.simplexml DEPTH -> 3 , tag -> compression 18:12:28 (I)
gajim.c.x.simplexml STARTTAG.. DEPTH -> 3 , tag -> auth, attrs ->
{u'xmlns': u'http://jabber.org/features/iq-auth'} 18:12:28 (I)
gajim.c.x.simplexml DEPTH -> 3 , tag -> auth 18:12:28 (I)
gajim.c.x.simplexml STARTTAG.. DEPTH -> 3 , tag -> register, attrs ->
{u'xmlns': u'http://jabber.org/features/iq-register'} 18:12:28 (I)
gajim.c.x.simplexml DEPTH -> 3 , tag -> register 18:12:28 (I)
gajim.c.x.simplexml DEPTH -> 2 , tag -> stream:features 18:12:28 (D)
gajim.c.x.dispatcher_nb Got http://etherx.jabber.org/streams/features
stanza 18:12:28 (I) gajim.c.x.client_nb got STREAM FEATURES in second
recv 18:12:28 (I) gajim.c.x.client_nb
-------------xmpp_connect_machine() >> mode: STREAM_STARTED, data:
None... 18:12:28 (D) gajim.c.ged plain-connection Args:
(<common.connection_handlers_events.PlainConnectionEvent object at
0xb2fc010c>,) 18:15:29 (I) gajim.c.x.transports_nb pollin called, state
0xb2fc010c>== CONNECTED 18:15:29 (I) gajim.c.x.idlequeue read timeout
0xb2fc010c>removed for fd 13 18:15:29 (I) gajim.c.x.client_nb raising
0xb2fc010c>event from transport: :::::DATA RECEIVED:::: _____________
0xb2fc010c><iq type="get" id="592-212901" from="jit.si"
0xb2fc010c>to="jit.si/6c3017f3"><ping xmlns="urn:xmpp:ping"/></iq>
0xb2fc010c>_____________

18:15:29 (D) gajim.c.ged stanza-received
Args: (<common.connection_handlers_events.StanzaReceivedEvent object at
0xb2fc02ec>,) 18:15:29 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 2 ,
0xb2fc02ec>tag -> iq, attrs -> {u'from': u'jit.si', u'type': u'get',
0xb2fc02ec>u'id': u'592-212901', u'to': u'jit.si/6c3017f3'}
18:15:29 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 3 , tag -> ping,
attrs -> {u'xmlns': u'urn:xmpp:ping'} 18:15:29 (I) gajim.c.x.simplexml
DEPTH -> 3 , tag -> ping 18:15:29 (I) gajim.c.x.simplexml DEPTH -> 2 ,
tag -> iq 18:15:29 (D) gajim.c.x.dispatcher_nb Got jabber:client/iq
stanza 18:15:29 (I) gajim.c.x.transports_nb Plugging fd 13, W:True,
R:True 18:15:29 (I) gajim.c.x.transports_nb pollout called, state ==
CONNECTED 18:15:29 (I) gajim.c.x.transports_nb Plugging fd 13, W:False,
R:True 18:15:29 (I) gajim.c.x.client_nb raising event from
transport: :::::DATA SENT:::: _____________
<iq xmlns="jabber:client" type="error" from="jit.si/6c3017f3"
id="592-212901" to="jit.si"><ping xmlns="urn:xmpp:ping" /><error
code="501" type="cancel"><feature-not-implemented
xmlns="urn:ietf:params:xml:ns:xmpp-stanzas" /><text
xmlns="urn:ietf:params:xml:ns:xmpp-stanzas">The feature requested is
not implemented by the recipient or server and therefore cannot be
processed.</text></error></iq> _____________

18:15:29 (D) gajim.c.ged stanza-sent
Args: (<common.connection_handlers_events.StanzaSentEvent object at
0xb2fbca8c>,) 18:15:29 (I) gajim.c.x.transports_nb pollin called, state
0xb2fbca8c>== CONNECTED
18:15:29 (I) gajim.c.x.idlequeue read timeout removed for fd 13
18:15:29 (I) gajim.c.x.client_nb raising event from
transport: :::::DATA RECEIVED:::: _____________
</stream:stream>
_____________

18:15:29 (D) gajim.c.ged stanza-received
Args: (<common.connection_handlers_events.StanzaReceivedEvent object at
0xb2fbca8c>,) 18:15:29 (I) gajim.c.x.simplexml DEPTH -> 1 , tag ->
0xb2fbca8c>stream:stream
18:15:29 (I) gajim.c.x.simplexml Got higher than dispatch level. Stream
terminated? 18:15:29 (I) gajim.c.x.client_nb Disconnecting NBClient:
18:15:29 (I) gajim.c.x.plugin Plugging
<common.xmpp.transports_nb.NonBlockingTCP instance at 0xb2fc0cac>
__OUT__ of <common.xmpp.client_nb.NonBlockingClient instance at
0xb2fc0bec>. 18:15:29 (D) gajim.c.x.client_nb Client disconnected..
0xb2fc0bec>18:15:29 (D) gajim.c.x.client_nb Calling disconnect handler
0xb2fc0bec><bound method Connection._on_disconnected of
0xb2fc0bec><common.connection.Connection object at 0xb4a38dac>>
0xb2fc0bec>18:15:29 (D) gajim.c.ged our-show
Args: (<common.connection_handlers_events.OurShowEvent object at
0xb4a616cc>,) 18:15:29 (D) gajim.c.ged our-show
Args: (<common.connection_handlers_events.OurShowEvent object at
0xb2fbc74c>,) 18:48:06 (D) gajim.c.gnupg gpg --status-fd 2 --no-tty
0xb2fbc74c>--version
18:48:06 (D) gajim.c.gnupg stderr reader: <Thread(Thread-6, initial
daemon)> 18:48:06 (D) gajim.c.gnupg stdout reader: <Thread(Thread-7,
initial daemon)> 18:48:06 (D) gajim.c.gnupg chunk: 'gpg (GnuPG)
2.0.25\nlibgcrypt 1.6.1\nCopyright (C) 2013 Free Software Foundation,
Inc.\nLicense GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>\nThis is free software: you are free
to change and redistribute it.\nThere is NO WARRANTY, to t' 18:48:06
(D) gajim.c.resolver resolve _xmpp-client._tcp.jit.si type=srv 18:48:06
(D) gajim.c.resolver _xmpp-client._tcp.jit.si already resolved:
[{'ssl_port': 5223, 'host': 'xmpp.jit.si', 'prio': 35, 'port': 5222,
'weight': 0}, {'ssl_port': 5223, 'host': 'swing.bluejimp.com', 'prio':
30, 'port': 5222, 'weight': 0}] 18:48:06 (D) gajim.c.connection
Connection to next host 18:48:06 (I) gajim.c.connection >>>>>>
Connecting to jit.si [swing.bluejimp.com:5222], type = tls 18:48:06 (I)
gajim.c.x.plugin Plugging <common.xmpp.transports_nb.NonBlockingTCP
instance at 0xb33510cc> __INTO__
<common.xmpp.client_nb.NonBlockingClient instance at 0xb2aa9b6c>
18:48:06 (I) gajim.c.x.transports_nb NonBlockingTCP Connect :: About to
connect to 130.79.91.169:5222 18:48:06 (I) gajim.c.x.transports_nb
Plugging fd 16, W:True, R:False 18:48:06 (I) gajim.c.x.idlequeue read
timeout set for fd 16 on 30 seconds 18:48:06 (I)
gajim.c.x.transports_nb After NB connect() of 3006599372. "Operation
now in progress" raised => CONNECTING 18:48:06 (I)
gajim.c.x.transports_nb pollout called, state == CONNECTING 18:48:06
(I) gajim.c.x.transports_nb 3006599372 socket wrapper connected
18:48:06 (I) gajim.c.x.idlequeue read timeout removed for fd 16
18:48:06 (I) gajim.c.x.transports_nb Plugging fd 16, W:False, R:False
18:48:06 (I) gajim.c.x.client_nb -------------xmpp_connect_machine() >>
mode: None, data: None... 18:48:06 (I) gajim.c.x.plugin Plugging
<common.xmpp.dispatcher_nb.XMPPDispatcher instance at 0xb37a63cc>
__INTO__ <common.xmpp.client_nb.NonBlockingClient instance at
0xb2aa9b6c> 18:48:06 (D) gajim.c.x.dispatcher_nb Registering namespace
0xb2aa9b6c> "unknown" 18:48:06 (D) gajim.c.x.dispatcher_nb Registering
0xb2aa9b6c> protocol "unknown" as <class
0xb2aa9b6c> 'common.xmpp.protocol.Protocol'>(unknown) 18:48:06 (D)
0xb2aa9b6c> gajim.c.x.dispatcher_nb Registering protocol "default" as
0xb2aa9b6c> <class 'common.xmpp.protocol.Protocol'>(unknown) 18:48:06
0xb2aa9b6c> (D) gajim.c.x.dispatcher_nb Registering namespace
0xb2aa9b6c> "http://etherx.jabber.org/streams" 18:48:06 (D)
0xb2aa9b6c> gajim.c.x.dispatcher_nb Registering protocol "unknown" as
0xb2aa9b6c> <class
0xb2aa9b6c> 'common.xmpp.protocol.Protocol'>(http://etherx.jabber.org/streams)
0xb2aa9b6c> 18:48:06 (D) gajim.c.x.dispatcher_nb Registering protocol
0xb2aa9b6c> "default" as <class
0xb2aa9b6c> 'common.xmpp.protocol.Protocol'>(http://etherx.jabber.org/streams)
0xb2aa9b6c> 18:48:06 (D) gajim.c.x.dispatcher_nb Registering namespace
0xb2aa9b6c> "jabber:client" 18:48:06 (D) gajim.c.x.dispatcher_nb
0xb2aa9b6c> Registering protocol "unknown" as <class
0xb2aa9b6c> 'common.xmpp.protocol.Protocol'>(jabber:client) 18:48:06
0xb2aa9b6c> (D) gajim.c.x.dispatcher_nb Registering protocol "default"
0xb2aa9b6c> as <class 'common.xmpp.protocol.Protocol'>(jabber:client)
0xb2aa9b6c> 18:48:06 (D) gajim.c.x.dispatcher_nb Registering protocol
0xb2aa9b6c> "iq" as <class 'common.xmpp.protocol.Iq'>(jabber:client)
0xb2aa9b6c> 18:48:06 (D) gajim.c.x.dispatcher_nb Registering protocol
0xb2aa9b6c> "presence" as <class
0xb2aa9b6c> 'common.xmpp.protocol.Presence'>(jabber:client) 18:48:06
0xb2aa9b6c> (D) gajim.c.x.dispatcher_nb Registering protocol "message"
0xb2aa9b6c> as <class 'common.xmpp.protocol.Message'>(jabber:client)
0xb2aa9b6c> 18:48:06 (D) gajim.c.x.simplexml Preparing to handle
0xb2aa9b6c> incoming XML stream. 18:48:06 (I) gajim.c.x.transports_nb
0xb2aa9b6c> Plugging fd 16, W:True, R:True
18:48:06 (I) gajim.c.x.client_nb setting RECEIVE_DOCUMENT_ATTRIBUTES on
next receive 18:48:06 (I) gajim.c.x.transports_nb pollout called, state
== CONNECTED 18:48:06 (I) gajim.c.x.transports_nb Plugging fd 16,
W:False, R:True 18:48:06 (I) gajim.c.x.client_nb raising event from
transport: :::::DATA SENT:::: _____________
<?xml version='1.0'?><stream:stream xmlns="jabber:client" to="jit.si"
version="1.0" xmlns:stream="http://etherx.jabber.org/streams"
xml:lang="en" > _____________

18:48:06 (D) gajim.c.ged stanza-sent
Args: (<common.connection_handlers_events.StanzaSentEvent object at
0xb3005ecc>,) 18:48:06 (I) gajim.c.x.transports_nb pollin called, state
0xb3005ecc>== CONNECTED
18:48:06 (I) gajim.c.x.idlequeue read timeout removed for fd 16
18:48:06 (I) gajim.c.x.client_nb raising event from
transport: :::::DATA RECEIVED:::: _____________
<?xml version='1.0' encoding='UTF-8'?><stream:stream
xmlns:stream="http://etherx.jabber.org/streams" xmlns="jabber:client"
from="jit.si" id="48bd7b5d" xml:lang="en" version="1.0"> _____________

18:48:06 (D) gajim.c.ged stanza-received
Args: (<common.connection_handlers_events.StanzaReceivedEvent object at
0xb3005ecc>,) 18:48:06 (I) gajim.c.x.client_nb
0xb3005ecc>-------------xmpp_connect_machine() >> mode:
0xb3005ecc>RECEIVE_DOCUMENT_ATTRIBUTES, data: <?xml version=‘1.0’ ...
18:48:06 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 1 , tag ->
stream:stream, attrs -> {u’xmlns’: u’jabber:client’, u’from’:
u’jit.si’, u’xml:lang’: u’en’, u’version’: u’1.0’, u’xmlns:stream’:
u’http://etherx.jabber.org/streams’, u’id’: u’48bd7b5d’} 18:48:06 (I)
gajim.c.x.client_nb setting RECEIVE_STREAM_FEATURES on next receive
18:48:06 (I) gajim.c.x.transports_nb pollin called, state == CONNECTED
18:48:06 (I) gajim.c.x.idlequeue read timeout removed for fd 16
18:48:06 (I) gajim.c.x.client_nb raising event from
transport: :::::DATA RECEIVED:::: _____________
<stream:features><starttls
xmlns=“urn:ietf:params:xml:ns:xmpp-tls”></starttls><mechanisms
xmlns=“urn:ietf:params:xml:ns:xmpp-sasl”><mechanism>DIGEST-MD5</mechanism><mechanism>PLAIN</mechanism><mechanism>CRAM-MD5</mechanism></mechanisms><compression
xmlns=“http://jabber.org/features/compress”><method>zlib</method></compression><auth
xmlns=“http://jabber.org/features/iq-auth”/><register
xmlns=“http://jabber.org/features/iq-register”/></stream:features>
_____________

18:48:06 (D) gajim.c.ged stanza-received
Args: (<common.connection_handlers_events.StanzaReceivedEvent object at
0xb2fc0b2c>,) 18:48:06 (I) gajim.c.x.client_nb
0xb2fc0b2c>-------------xmpp_connect_machine() >> mode:
0xb2fc0b2c>RECEIVE_STREAM_FEATURES, data: <stream:features><st...
18:48:06 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 2 , tag ->
stream:features, attrs -> {} 18:48:06 (I) gajim.c.x.simplexml
STARTTAG.. DEPTH -> 3 , tag -> starttls, attrs -> {u'xmlns':
u'urn:ietf:params:xml:ns:xmpp-tls'} 18:48:06 (I) gajim.c.x.simplexml
DEPTH -> 3 , tag -> starttls 18:48:06 (I) gajim.c.x.simplexml
STARTTAG.. DEPTH -> 3 , tag -> mechanisms, attrs -> {u'xmlns':
u'urn:ietf:params:xml:ns:xmpp-sasl'} 18:48:06 (I) gajim.c.x.simplexml
STARTTAG.. DEPTH -> 4 , tag -> mechanism, attrs -> {} 18:48:06 (I)
gajim.c.x.simplexml DEPTH -> 4 , tag -> mechanism 18:48:06 (I)
gajim.c.x.simplexml STARTTAG.. DEPTH -> 4 , tag -> mechanism, attrs ->
{} 18:48:06 (I) gajim.c.x.simplexml DEPTH -> 4 , tag -> mechanism
18:48:06 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 4 , tag ->
mechanism, attrs -> {} 18:48:06 (I) gajim.c.x.simplexml DEPTH -> 4 ,
tag -> mechanism 18:48:06 (I) gajim.c.x.simplexml DEPTH -> 3 , tag ->
mechanisms 18:48:06 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 3 , tag
-> compression, attrs -> {u'xmlns':
u'http://jabber.org/features/compress'} 18:48:06 (I)
gajim.c.x.simplexml STARTTAG.. DEPTH -> 4 , tag -> method, attrs -> {}
18:48:06 (I) gajim.c.x.simplexml DEPTH -> 4 , tag -> method 18:48:06
(I) gajim.c.x.simplexml DEPTH -> 3 , tag -> compression 18:48:06 (I)
gajim.c.x.simplexml STARTTAG.. DEPTH -> 3 , tag -> auth, attrs ->
{u'xmlns': u'http://jabber.org/features/iq-auth'} 18:48:06 (I)
gajim.c.x.simplexml DEPTH -> 3 , tag -> auth 18:48:06 (I)
gajim.c.x.simplexml STARTTAG.. DEPTH -> 3 , tag -> register, attrs ->
{u'xmlns': u'http://jabber.org/features/iq-register'} 18:48:06 (I)
gajim.c.x.simplexml DEPTH -> 3 , tag -> register 18:48:06 (I)
gajim.c.x.simplexml DEPTH -> 2 , tag -> stream:features 18:48:06 (D)
gajim.c.x.dispatcher_nb Got http://etherx.jabber.org/streams/features
stanza 18:48:06 (I) gajim.c.x.client_nb got STREAM FEATURES in second
recv 18:48:06 (I) gajim.c.x.client_nb
-------------xmpp_connect_machine() >> mode: STREAM_STARTED, data:
None... 18:48:06 (I) gajim.c.x.client_nb TLS supported by remote
server. Requesting TLS start. 18:48:06 (I) gajim.c.x.client_nb
-------------tls_negotiaton_handler() >> tag: None 18:48:06 (D)
gajim.c.x.dispatcher_nb Registering handler <bound method
NonBlockingClient._tls_negotiation_handler of
<common.xmpp.client_nb.NonBlockingClient instance at 0xb2aa9b6c>> for
"proceed" type-> ns->(urn:ietf:params:xml:ns:xmpp-tls) 18:48:06 (D)
gajim.c.x.dispatcher_nb Registering namespace
"urn:ietf:params:xml:ns:xmpp-tls" 18:48:06 (D) gajim.c.x.dispatcher_nb
Registering protocol "unknown" as <class
'common.xmpp.protocol.Protocol'>(urn:ietf:params:xml:ns:xmpp-tls)
18:48:06 (D) gajim.c.x.dispatcher_nb Registering protocol "default" as
<class
'common.xmpp.protocol.Protocol'>(urn:ietf:params:xml:ns:xmpp-tls)
18:48:06 (D) gajim.c.x.dispatcher_nb Registering protocol "proceed" as
<class
'common.xmpp.protocol.Protocol'>(urn:ietf:params:xml:ns:xmpp-tls)
18:48:06 (D) gajim.c.x.dispatcher_nb Registering handler <bound method
NonBlockingClient._tls_negotiation_handler of
<common.xmpp.client_nb.NonBlockingClient instance at 0xb2aa9b6c>> for
"failure" type-> ns->(urn:ietf:params:xml:ns:xmpp-tls) 18:48:06 (D)
gajim.c.x.dispatcher_nb Registering protocol "failure" as <class
'common.xmpp.protocol.Protocol'>(urn:ietf:params:xml:ns:xmpp-tls)
18:48:06 (I) gajim.c.x.transports_nb Plugging fd 16, W:True, R:True
18:48:06 (I) gajim.c.x.transports_nb pollout called, state == CONNECTED
18:48:06 (I) gajim.c.x.transports_nb Plugging fd 16, W:False, R:True
18:48:06 (I) gajim.c.x.client_nb raising event from
transport: :::::DATA SENT:::: _____________ <starttls
xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> _____________

18:48:06 (D) gajim.c.ged stanza-sent
Args: (<common.connection_handlers_events.StanzaSentEvent object at
0xb2fc0e2c>,) 18:48:06 (I) gajim.c.x.transports_nb pollin called, state
0xb2fc0e2c>== CONNECTED
18:48:06 (I) gajim.c.x.idlequeue read timeout removed for fd 16
18:48:06 (I) gajim.c.x.client_nb raising event from
transport: :::::DATA RECEIVED:::: _____________
<proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>
_____________

18:48:06 (D) gajim.c.ged stanza-received
Args: (<common.connection_handlers_events.StanzaReceivedEvent object at
0xb2fc0e2c>,) 18:48:06 (I) gajim.c.x.simplexml STARTTAG.. DEPTH -> 2 ,
0xb2fc0e2c>tag -> proceed, attrs -> {u'xmlns':
0xb2fc0e2c>u'urn:ietf:params:xml:ns:xmpp-tls'}
18:48:06 (I) gajim.c.x.simplexml DEPTH -> 2 , tag -> proceed
18:48:06 (D) gajim.c.x.dispatcher_nb Got
urn:ietf:params:xml:ns:xmpp-tls/proceed stanza 18:48:06 (I)
gajim.c.x.client_nb -------------tls_negotiaton_handler() >> tag:
<proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls" /> 18:48:06 (I)
gajim.c.x.client_nb Got starttls proceed response. Switching to
TLS/SSL... 18:48:06 (I) gajim.c.x.plugin Plugging
<common.xmpp.tls_nb.NonBlockingTLS instance at 0xb2fc0ccc> __INTO__
<common.xmpp.transports_nb.NonBlockingTCP instance at 0xb33510cc>
18:48:06 (I) gajim.c.x.tls_nb Starting TLS estabilishing 18:48:06 (D)
gajim.c.x.tls_nb _startSSL called 18:48:06 (D) gajim.c.x.tls_nb
_startSSL_pyOpenSSL called 18:48:06 (W) gajim.c.x.tls_nb Unable to load
SSL certificates from file /usr/lib/python2.7/site-packages/gajim
18:48:06 (D) gajim.c.x.tls_nb
common.xmpp.tls_nb.PyOpenSSLWrapper.__init__ called with
<OpenSSL.SSL.Connection object at 0xb2fc30ac> 18:48:06 (D)
gajim.c.x.tls_nb Initiating handshake... 18:48:06 (D) gajim.c.x.tls_nb
Synchronous handshake completed 18:48:06 (I) gajim.c.x.client_nb
-------------xmpp_connect_machine() >> mode: None, data: None...
18:48:06 (I) gajim.c.x.plugin Plugging
<common.xmpp.dispatcher_nb.XMPPDispatcher instance at 0xb37a63cc>
__OUT__ of <common.xmpp.client_nb.NonBlockingClient instance at
0xb2aa9b6c>. 18:48:06 (I) gajim.c.x.plugin Plugging
0xb2aa9b6c><common.xmpp.dispatcher_nb.XMPPDispatcher instance at
0xb2aa9b6c>0xb2fc324c> __INTO__
0xb2aa9b6c>0xb2fc324c> <common.xmpp.client_nb.NonBlockingClient
0xb2aa9b6c>0xb2fc324c> instance at 0xb2aa9b6c> 18:48:06 (D)
0xb2aa9b6c>0xb2fc324c> gajim.c.x.dispatcher_nb Registering namespace
0xb2aa9b6c>0xb2fc324c> "unknown" 18:48:06 (D) gajim.c.x.dispatcher_nb
0xb2aa9b6c>0xb2fc324c> Registering protocol "unknown" as <class
0xb2aa9b6c>0xb2fc324c> 'common.xmpp.protocol.Protocol'>(unknown)
0xb2aa9b6c>0xb2fc324c> 18:48:06 (D) gajim.c.x.dispatcher_nb Registering
0xb2aa9b6c>0xb2fc324c> protocol "default" as <class
0xb2aa9b6c>0xb2fc324c> 'common.xmpp.protocol.Protocol'>(unknown)
0xb2aa9b6c>0xb2fc324c> 18:48:06 (D) gajim.c.x.dispatcher_nb Registering
0xb2aa9b6c>0xb2fc324c> namespace "http://etherx.jabber.org/streams"
0xb2aa9b6c>0xb2fc324c> 18:48:06 (D) gajim.c.x.dispatcher_nb Registering
0xb2aa9b6c>0xb2fc324c> protocol "unknown" as <class
0xb2aa9b6c>0xb2fc324c> 'common.xmpp.protocol.Protocol'>(http://etherx.jabber.org/streams)
0xb2aa9b6c>0xb2fc324c> 18:48:06 (D) gajim.c.x.dispatcher_nb Registering
0xb2aa9b6c>0xb2fc324c> protocol "default" as <class
0xb2aa9b6c>0xb2fc324c> 'common.xmpp.protocol.Protocol'>(http://etherx.jabber.org/streams)
0xb2aa9b6c>0xb2fc324c> 18:48:06 (D) gajim.c.x.dispatcher_nb Registering
0xb2aa9b6c>0xb2fc324c> namespace "jabber:client" 18:48:06 (D)
0xb2aa9b6c>0xb2fc324c> gajim.c.x.dispatcher_nb Registering protocol
0xb2aa9b6c>0xb2fc324c> "unknown" as <class
0xb2aa9b6c>0xb2fc324c> 'common.xmpp.protocol.Protocol'>(jabber:client)
18:48:06 (D) gajim.c.x.dispatcher_nb Registering protocol "default" as
<class 'common.xmpp.protocol.Protocol'>(jabber:client) 18:48:06 (D)
gajim.c.x.dispatcher_nb Registering protocol "iq" as <class
'common.xmpp.protocol.Iq'>(jabber:client) 18:48:06 (D)
gajim.c.x.dispatcher_nb Registering protocol "presence" as <class
'common.xmpp.protocol.Presence'>(jabber:client) 18:48:06 (D)
gajim.c.x.dispatcher_nb Registering protocol "message" as <class
'common.xmpp.protocol.Message'>(jabber:client) 18:48:06 (D)
gajim.c.x.simplexml Preparing to handle incoming XML stream. 18:48:06
(I) gajim.c.x.transports_nb Plugging fd 16, W:True, R:True 18:48:06 (I)
gajim.c.x.client_nb setting RECEIVE_DOCUMENT_ATTRIBUTES on next receive
18:48:06 (I) gajim.c.x.transports_nb pollout called, state == CONNECTED
18:48:06 (I) gajim.c.x.transports_nb pollout called, state == CONNECTED
18:48:07 (I) gajim.c.x.transports_nb pollout called, state == CONNECTED


#6

Would you mind posting the exact reason why the other clients think
the certificate is invalid? I'll try to inspect our cert anyway, but
this info would help.

Freundliche Grüsse,
Ingo Bauersachs

Hi Ingo.

So atm.:
psi and gajim work for a different account but not jit.si.
jitsi and pidgin work for both.

I tried to figure it out what the exact error is, but with limited
success. In psi I didn't find a debug feature or any useful messages.
Both clients try to connect for a long time. Gajim seems to connect for
several minutes until it pops up a warning window. I found a verbose mode
and at the end of the message you see what seems to be the relevant
output.

This output is gibberish to me. You might want to ask the devs of these applications if it makes any sense to them.

FWIW: They might have disabled support for SSLv3, but apparently this is the only SSL version jit.si supports according to the output of https://xmpp.net/result.php?domain=jit.si&type=client

Yasen, can we reconfigure that to get an A with 100 points everywhere?

Regards,
Philipp

Ingo

···

On 2014-07-24 23:56, Philipp Überbacher wrote:

On Thu, 24 Jul 2014 21:05:58 +0700 > Ingo Bauersachs <ingo@jitsi.org> wrote:


#7

Yep, it's on my task list.

···

On Fri, 25 Jul 2014 01:51:10 +0700 Ingo Bauersachs wrote:

FWIW: They might have disabled support for SSLv3, but apparently this
is the only SSL version jit.si supports according to the output of
https://xmpp.net/result.php?domain=jit.si&type=client

Yasen, can we reconfigure that to get an A with 100 points everywhere?

--
Yasen Pramatarov
sysadmin, https://jitsi.org