[gentoo-user] pidgin, ssl, and xmpp

On Jan 7, 2012 9:59 AM, "Andrey Moshbear" wrote:

With the following pidgin debug log:
21:46:56) account: Connecting to account /.
(21:46:56) connection: Connecting. gc = 0x1d44780
(21:46:56) dnssrv: querying SRV record for gmail.com:
_xmpp-client._tcp.gmail.com
(21:46:56) dnssrv: found 5 SRV entries
(21:46:56) dnsquery: Performing DNS lookup for xmpp.l.google.com
(21:46:56) dns: Successfully sent DNS request to child 805
(21:46:56) dns: Got response for 'xmpp.l.google.com'
(21:46:56) dnsquery: IP resolved for xmpp.l.google.com
(21:46:56) proxy: Attempting connection to 209.85.225.125
(21:46:56) proxy: Connecting to xmpp.l.google.com:5222 with no proxy
(21:46:56) proxy: Connection in progress
(21:46:56) proxy: Connecting to xmpp.l.google.com:5222.
(21:46:56) proxy: Connected to xmpp.l.google.com:5222.
(21:46:56) jabber: Sending (): <?xml version='1.0' ?>
(21:46:56) jabber: Sending (): <stream:stream
to='gmail.com' xmlns='jabber:client'
xmlns:stream='http://etherx.jabber.org/streams' version='1.0'>
(21:46:56) jabber: Recv (138): <stream:stream from="gmail.com"
id="0A69C2453F195AB0" version="1.0"
xmlns:stream="http://etherx.jabber.org/streams" xmlns="jabber:client">
(21:46:56) jabber: Recv (241): <stream:features><starttls
xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><mechanisms

xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>X-GOOGLE-TOKEN</mechanism><mechanism>X-OAUTH2</mechanism></mechanisms></stream:features>

(21:46:56) jabber: Sending (): <starttls
xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
(21:46:56) jabber: Recv (50): <proceed

xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

(21:46:56) gnutls: Starting handshake with gmail.com
(21:46:56) util: Writing file prefs.xml to directory /home/XXX/.purple
(21:46:56) util: Writing file /home/XXX/.purple/prefs.xml
(21:46:56) gnutls: Handshake complete
(21:46:56) gnutls/x509: Key print:
0c:99:2a:04:72:48:59:1a:3c:cf:ab:60:d0:2a:9e:73:73:42:f0:08
(21:46:56) gnutls/x509: Key print:
dd:7a:7f:13:1d:db:a3:3d:3e:86:70:17:94:83:e6:fe:a6:98:7d:6a
(21:46:56) gnutls: Peer provided 2 certs
(21:46:56) gnutls: Lvl 0 SHA1 fingerprint:
0c:99:2a:04:72:48:59:1a:3c:cf:ab:60:d0:2a:9e:73:73:42:f0:08
(21:46:56) gnutls: Serial: 6d:ca:e4:9f:00:03:00:00:34:be
(21:46:56) gnutls: Cert DN: C=US,ST=California,L=Mountain
View,O=Google Inc.,CN=gmail.com
(21:46:56) gnutls: Cert Issuer DN: C=US,O=Google Inc,CN=Google
Internet Authority
(21:46:56) gnutls: Lvl 1 SHA1 fingerprint:
dd:7a:7f:13:1d:db:a3:3d:3e:86:70:17:94:83:e6:fe:a6:98:7d:6a
(21:46:56) gnutls: Serial: 0b:67:71
(21:46:56) gnutls: Cert DN: C=US,O=Google Inc,CN=Google Internet Authority
(21:46:56) gnutls: Cert Issuer DN: C=US,O=Equifax,OU=Equifax Secure
Certificate Authority
(21:46:56) certificate/x509/tls_cached: Starting verify for gmail.com
(21:46:56) certificate/x509/tls_cached: Checking for cached cert...
(21:46:56) certificate/x509/tls_cached: ...Found cached cert
(21:46:56) gnutls: Attempting to load X.509 certificate from
/home/XXX/.purple/certificates/x509/tls_peers/gmail.com
(21:46:56) certificate/x509/tls_cached: Peer cert matched cached
(21:46:56) util: Writing file
/home/XXX/.purple/certificates/x509/tls_peers/gmail.com
(21:46:56) certificate: Successfully verified certificate for gmail.com
(21:46:56) jabber: Sending (ssl) (): <stream:stream
to='gmail.com' xmlns='jabber:client'
xmlns:stream='http://etherx.jabber.org/streams' version='1.0'>
(21:46:56) jabber: Recv (ssl)(138): <stream:stream from="gmail.com"
id="6C45C0A9313259E1" version="1.0"
xmlns:stream="http://etherx.jabber.org/streams" xmlns="jabber:client">
(21:46:56) jabber: Recv (ssl)(197): <stream:features><mechanisms

xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>PLAIN</mechanism><mechanism>X-GOOGLE-TOKEN</mechanism><mechanism>X-OAUTH2</mechanism></mechanisms></stream:features>

(21:46:56) sasl: sasl_state is -1, failing the mech and trying again
(21:46:56) connection: Connection error on 0x1d44780 (reason: 3
description: Server does not use any supported authentication method)
(21:46:57) account: Disconnecting account / (0x1a3dbb0)
(21:46:57) connection: Disconnecting connection 0x1d44780
(21:46:57) jabber: Sending (ssl) (): </stream:stream>
(21:46:57) connection: Destroying connection 0x1d44780

and USE flags:
dev-libs/cyrus-sasl-2.1.25 berkdb gdbm java kerberos mysql pam
postgres sqlite ssl -authdaemond -elibc_FreeBSD -ldapdb -openldap
-sample -srp -static-libs -urandom
net-im/pidgin-2.10.1 dbus debug doc gnutls gstreamer gtk idn ncurses
nls perl python sasl spell tcl tk xscreensaver -eds -gadu -groupwise
-meanwhile -networkmanager -prediction -silc -zephyr -zeroconf
net-libs/gnutls-2.10.5 cxx doc lzo nls zlib -bindist -examples -guile

-test

where exactly is the SSL problem?

It's not SSL problem, but SASL authentication failure.

Check the following, might help :

http://askubuntu.com/questions/8898...sasl-error

Rgds,


<p><br>
On Jan 7, 2012 9:59 AM, &quot;Andrey Moshbear&quot; &lt;<a href="mailto:"></a>&gt; wrote:<br>
&gt;<br>
&gt; With the following pidgin debug log:<br>
&gt; 21:46:56) account: Connecting to account <a href="http:///">/</a>.<br>
&gt; (21:46:56) connection: Connecting. gc = 0x1d44780<br>
&gt; (21:46:56) dnssrv: querying SRV record for <a href="http://gmail.com">gmail.com</a>:<br>
&gt; _xmpp-client._<a href="http://tcp.gmail.com">tcp.g...<br>
&gt; (21:46:56) dnssrv: found 5 SRV entries<br>
&gt; (21:46:56) dnsquery: Performing DNS lookup for <a href="http://xmpp.l.google.com">x...<br>
&gt; (21:46:56) dns: Successfully sent DNS request to child 805<br>
&gt; (21:46:56) dns: Got response for &#39;<a href="http://xmpp.l.google.com">x...<br>
&gt; (21:46:56) dnsquery: IP resolved for <a href="http://xmpp.l.google.com">x...<br>
&gt; (21:46:56) proxy: Attempting connection to 209.85.225.125<br>
&gt; (21:46:56) proxy: Connecting to <a href="http://xmpp.l.google.com:5222">xmpp.l.google.com:5222</a> with no proxy<br>
&gt; (21:46:56) proxy: Connection in progress<br>
&gt; (21:46:56) proxy: Connecting to <a href="http://xmpp.l.google.com:5222">xmpp.l.google.com:5222</a>.<br>
&gt; (21:46:56) proxy: Connected to <a href="http://xmpp.l.google.com:5222">xmpp.l.google.com:5222</a>.<br>
&gt; (21:46:56) jabber: Sending (<a href="mailto:"></a>): &lt;?xml version=&#39;1.0&#39; ?&gt;<br>
&gt; (21:46:56) jabber: Sending (<a href="mailto:"></a>): &lt;stream:stream<br>
&gt; to=&#39;<a href="http://gmail.com">gmail.com...;&#39; xmlns=&#39;jabber:client&#39;<br>
&gt; xmlns:stream=&#39;<a href="http://etherx.jabber.org/streams">http://etherx.jabber.org/streams</a>&#39; version=&#39;1.0&#39;&gt;<br>
&gt; (21:46:56) jabber: Recv (138): &lt;stream:stream from=&quot;<a href="http://gmail.com">gmail.com...<br>
&gt; id=&quot;0A69C2453F195AB0&quot; version=&quot;1.0&quot;<br>
&gt; xmlns:stream=&quot;<a href="http://etherx.jabber.org/streams">http://etherx.jabber.org/streams</a>&quot; xmlns=&quot;jabber:client&quot;&gt;<br>
&gt; (21:46:56) jabber: Recv (241): &lt;stream:features&gt;&lt;starttls<br>
&gt; xmlns=&quot;urn:ietf:params:xml:ns:xmpp-tls&quot;&gt;&lt;required/&gt;&lt;/starttls&gt;&lt;mechanisms<br>
&gt; xmlns=&quot;urn:ietf:params:xml:ns:xmpp-sasl&quot;&gt;&lt;mechanism&gt;X-GOOGLE-TOKEN&lt;/mechanism&gt;&lt;mechanism&gt;X-OAUTH2&lt;/mechanism&gt;&lt;/mechanisms&gt;&lt;/stream:features&gt;<br>
&gt; (21:46:56) jabber: Sending (<a href="mailto:"></a>): &lt;starttls<br>
&gt; xmlns=&#39;urn:ietf:params:xml:ns:xmpp-tls&#39;/&gt;<br>
&gt; (21:46:56) jabber: Recv (50): &lt;proceed xmlns=&quot;urn:ietf:params:xml:ns:xmpp-tls&quot;/&gt;<br>
&gt; (21:46:56) gnutls: Starting handshake with <a href="http://gmail.com">gmail.com...<br>
&gt; (21:46:56) util: Writing file prefs.xml to directory /home/XXX/.purple<br>
&gt; (21:46:56) util: Writing file /home/XXX/.purple/prefs.xml<br>
&gt; (21:46:56) gnutls: Handshake complete<br>
&gt; (21:46:56) gnutls/x509: Key print:<br>
&gt; 0c:99:2a:04:72:48:59:1a:3c:cf:ab:60:d0:2a:9e:73:73:42:f0:08<br>
&gt; (21:46:56) gnutls/x509: Key print:<br>
&gt; dd:7a:7f:13:1d:db:a3:3d:3e:86:70:17:94:83:e6:fe:a6:98:7d:6a<br>
&gt; (21:46:56) gnutls: Peer provided 2 certs<br>
&gt; (21:46:56) gnutls: Lvl 0 SHA1 fingerprint:<br>
&gt; 0c:99:2a:04:72:48:59:1a:3c:cf:ab:60:d0:2a:9e:73:73:42:f0:08<br>
&gt; (21:46:56) gnutls: Serial: 6d:ca:e4:9f:00:03:00:00:34:be<br>
&gt; (21:46:56) gnutls: Cert DN: C=US,ST=California,L=Mountain<br>
&gt; View,O=Google Inc.,CN=<a href="http://gmail.com">gmail.com...<br>
&gt; (21:46:56) gnutls: Cert Issuer DN: C=US,O=Google Inc,CN=Google<br>
&gt; Internet Authority<br>
&gt; (21:46:56) gnutls: Lvl 1 SHA1 fingerprint:<br>
&gt; dd:7a:7f:13:1d:db:a3:3d:3e:86:70:17:94:83:e6:fe:a6:98:7d:6a<br>
&gt; (21:46:56) gnutls: Serial: 0b:67:71<br>
&gt; (21:46:56) gnutls: Cert DN: C=US,O=Google Inc,CN=Google Internet Authority<br>
&gt; (21:46:56) gnutls: Cert Issuer DN: C=US,O=Equifax,OU=Equifax Secure<br>
&gt; Certificate Authority<br>
&gt; (21:46:56) certificate/x509/tls_cached: Starting verify for <a href="http://gmail.com">gmail.com...<br>
&gt; (21:46:56) certificate/x509/tls_cached: Checking for cached cert...<br>
&gt; (21:46:56) certificate/x509/tls_cached: ...Found cached cert<br>
&gt; (21:46:56) gnutls: Attempting to load X.509 certificate from<br>
&gt; /home/XXX/.purple/certificates/x509/tls_peers/<a href="http://gmail.com">gmail.com...<br>
&gt; (21:46:56) certificate/x509/tls_cached: Peer cert matched cached<br>
&gt; (21:46:56) util: Writing file<br>
&gt; /home/XXX/.purple/certificates/x509/tls_peers/<a href="http://gmail.com">gmail.com...<br>
&gt; (21:46:56) certificate: Successfully verified certificate for <a href="http://gmail.com">gmail.com...<br>
&gt; (21:46:56) jabber: Sending (ssl) (<a href="mailto:"></a>): &lt;stream:stream<br>
&gt; to=&#39;<a href="http://gmail.com">gmail.com...;&#39; xmlns=&#39;jabber:client&#39;<br>
&gt; xmlns:stream=&#39;<a href="http://etherx.jabber.org/streams">http://etherx.jabber.org/streams</a>&#39; version=&#39;1.0&#39;&gt;<br>
&gt; (21:46:56) jabber: Recv (ssl)(138): &lt;stream:stream from=&quot;<a href="http://gmail.com">gmail.com...<br>
&gt; id=&quot;6C45C0A9313259E1&quot; version=&quot;1.0&quot;<br>
&gt; xmlns:stream=&quot;<a href="http://etherx.jabber.org/streams">http://etherx.jabber.org/streams</a>&quot; xmlns=&quot;jabber:client&quot;&gt;<br>
&gt; (21:46:56) jabber: Recv (ssl)(197): &lt;stream:features&gt;&lt;mechanisms<br>
&gt; xmlns=&quot;urn:ietf:params:xml:ns:xmpp-sasl&quot;&gt;&lt;mechanism&gt;PLAIN&lt;/mechanism&gt;&lt;mechanism&gt;X-GOOGLE-TOKEN&lt;/mechanism&gt;&lt;mechanism&gt;X-OAUTH2&lt;/mechanism&gt;&lt;/mechanisms&gt;&lt;/stream:features&gt;<br>

&gt; (21:46:56) sasl: sasl_state is -1, failing the mech and trying again<br>
&gt; (21:46:56) connection: Connection error on 0x1d44780 (reason: 3<br>
&gt; description: Server does not use any supported authentication method)<br>
&gt; (21:46:57) account: Disconnecting account <a href="http:///">/</a> (0x1a3dbb0)<br>
&gt; (21:46:57) connection: Disconnecting connection 0x1d44780<br>
&gt; (21:46:57) jabber: Sending (ssl) (<a href="mailto:"></a>): &lt;/stream:stream&gt;<br>
&gt; (21:46:57) connection: Destroying connection 0x1d44780<br>
&gt;<br>
&gt; and USE flags:<br>
&gt; dev-libs/cyrus-sasl-2.1.25 berkdb gdbm java kerberos mysql pam<br>
&gt; postgres sqlite ssl -authdaemond -elibc_FreeBSD -ldapdb -openldap<br>
&gt; -sample -srp -static-libs -urandom<br>
&gt; net-im/pidgin-2.10.1 dbus debug doc gnutls gstreamer gtk idn ncurses<br>
&gt; nls perl python sasl spell tcl tk xscreensaver -eds -gadu -groupwise<br>
&gt; -meanwhile -networkmanager -prediction -silc -zephyr -zeroconf<br>
&gt; net-libs/gnutls-2.10.5 cxx doc lzo nls zlib -bindist -examples -guile -test<br>
&gt;<br>
&gt; where exactly is the SSL problem?<br>
&gt;</p>
<p>It&#39;s not SSL problem, but SASL authentication failure. </p>
<p>Check the following, might help :</p>
<p> <a href="http://askubuntu.com/questions/8898...t;>http://askubuntu.com/questions/88989/unable-to-connect-to-google-talk-using-pidgin-sasl-error</a></p>
<p>Rgds, <br>
</p>