Bug 444185 - Pidgin - XMPP connections over SSL(TLS) and proxy do not work
Summary: Pidgin - XMPP connections over SSL(TLS) and proxy do not work
Status: RESOLVED DUPLICATE of bug 443693
Alias: None
Product: openSUSE 11.1
Classification: openSUSE
Component: Network (show other bugs)
Version: Beta 5
Hardware: i686 Other
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: E-mail List
QA Contact: E-mail List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-11-12 14:15 UTC by René Krell
Modified: 2008-11-14 16:43 UTC (History)
4 users (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments
The output of 'pidgin -d' (62.58 KB, text/plain)
2008-11-14 16:31 UTC, René Krell
Details

Note You need to log in before you can comment on or make changes to this bug.
Description René Krell 2008-11-12 14:15:17 UTC
Upgrading from Beta4 to Beta 5 each time Pidgin tries to connect to an Jabber server via SSL and a HTTP proxy I get:

gnutls: Handshake failed. Error A TLS packet with unexpected length was received.

Setting for the account:
- Server: jabbim.com
- Require SSL/TLS (unchecking didn't matter)
- Force old (port 5223) SSL
Connect port: 5223

HTTP Proxy: squid/2.5.STABLE5

Installed packages:
- pidgin-2.5.1-2.25
- gnutls-2.4.1-22.3
- libgnutls-2.4.1-22.3
Comment 1 René Krell 2008-11-12 14:21:54 UTC
In Beta4 Pidgin worked fine with the same account settings.
Comment 2 René Krell 2008-11-12 14:23:36 UTC
Debugging Information from the Help - About window:

  Arguments to ./configure:   '--host=i686-suse-linux-gnu' '--build=i686-suse-linux-gnu' '--target=i586-suse-linux' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib' '--libexecdir=/usr/lib' '--localstatedir=/var' '--sharedstatedir=/usr/com' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--disable-static' '--enable-plugins' '--enable-cyrus-sasl' '--enable-mono=yes' '--enable-gstreamer=yes' '--enable-gnome-keyring=yes' '--enable-nm=yes' '--enable-dbus=yes' '--enable-devhelp' '--with-perl-lib=/usr' '--with-tclconfig=/usr/lib' '--with-tkconfig=/usr/lib' '--with-system-ssl-certs=/etc/ssl/certs' 'build_alias=i686-suse-linux-gnu' 'host_alias=i686-suse-linux-gnu' 'target_alias=i586-suse-linux' 'CFLAGS=-march=i586 -mtune=i686 -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -fstack-protector -fPIC -fno-strict-aliasing' 'LDFLAGS=-pie'
  Print debugging messages: No
  Plugins: Enabled
  SSL: SSL support is present.

  Library Support
    Cyrus SASL: Enabled
    D-Bus: Enabled
    Evolution Addressbook: Disabled
    Gadu-Gadu library (libgadu): Enabled
    GtkSpell: Enabled
    GnuTLS: Enabled
    GStreamer: Enabled
    Mono: Enabled
    NetworkManager: Enabled
    Network Security Services (NSS): Enabled
    Perl: Enabled
    Startup Notification: Enabled
    Tcl: Enabled
    Tk: Enabled
    X Session Management: Enabled
    XScreenSaver: Enabled
    Zephyr library (libzephyr): Internal
    Zephyr uses Kerberos: No
Comment 3 Dominique Leuenberger 2008-11-14 13:04:43 UTC
Could this be a DUP of bug #444074 ?

In both cases it seems to be an issue with TLS/SSL encryption not working anymore in beta 5.
Comment 4 René Krell 2008-11-14 13:16:02 UTC
This is possible, but I don't know how to verify this.
In both cases there is the "Handshake failed" message, that's all I see for now.
The message I posted above comes from the Pidgin debug window.
Comment 5 Vincent Untz 2008-11-14 16:15:13 UTC
Please run it from a terminal and look at the output. I'm pretty sure it's a duplicate of bug 443693.
Comment 6 René Krell 2008-11-14 16:31:21 UTC
Created attachment 252341 [details]
The output of 'pidgin -d'
Comment 7 René Krell 2008-11-14 16:35:48 UTC
libgcrypt11-1.4.1-2.3 is already installed, no change.
From stderr, on the console I get a 
  Rijndael-128 test encryption failed.
while Pidgin is starting.
Comment 8 Dominique Leuenberger 2008-11-14 16:38:53 UTC
Looks pretty much like 'my' debug output I posted.

Rene, I suggest you try the RPMs from
http://download.opensuse.org/repositories/home:/thoenig:/branches:/home:/makoenig:/Factory/openSUSE_Factory/
of libgcrypt11.

They helped me solve this issue (and it would state the bug 100% sure a dup of
#443693)

Comment 9 René Krell 2008-11-14 16:43:42 UTC
Thank you for this service!
Good job, Pidgin connects now with the libgcrypt packages you sent me :-)

*** This bug has been marked as a duplicate of bug 443693 ***