[jitsi-users] Jitsi Failing to Connect to Ostel from Mac OS X - TLS Error


#1

Hi All,

Not more than a month or two ago, my Jitsi installation on Mac OS X Mavericks was working fine - connecting to my SIP provider, ostel.co.

At some point it stopped working, and I've just spent the last hour or so trying to work out why.

I can connect fine using a Linux VM on the same machine, or on a separate Windows computer.

However, under Mac OS X - just after the SSL/TLS handshake completes between Jitsi and the Ostel server - there is a TLSv1 Fatal Internal Error.

Not sure if I can attach files to messages to this list - however, attacked is a Wireshark/TCP dump PCAP file showing the exchange.

I've also tried upgrading the OpenSSL stack on Mac OS X - but that didn't make any difference.

Any ideas?

Best,

Tony

jitsi.pcap.zip (2.98 KB)


#2

Not more than a month or two ago, my Jitsi installation on Mac OS X

Mavericks

was working fine - connecting to my SIP provider, ostel.co.

At some point it stopped working, and I've just spent the last hour or so
trying to work out why.

I can connect fine using a Linux VM on the same machine, or on a separate
Windows computer.

However, under Mac OS X - just after the SSL/TLS handshake completes

between

Jitsi and the Ostel server - there is a TLSv1 Fatal Internal Error.

Not sure if I can attach files to messages to this list - however,

attacked

is a Wireshark/TCP dump PCAP file showing the exchange.

I've also tried upgrading the OpenSSL stack on Mac OS X - but that didn't
make any difference.

Any ideas?

This might be related to the SSL/TLS settings supported by the different
JVMs on Linux and OSX. Can you make a comparison of the settings within
Tools->Options->Advanced->SIP->SSL/TLS Protocols?

I suspect that TLSv1 is not enabled on OS X. If so, disable SSLv2Hello and
SSLv3; enable TLSv1, TLSv1.1, TLSv1.2 and restart Jitsi.

Best,
Tony

Ingo