From mboxrd@z Thu Jan 1 00:00:00 1970
Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org)
by finch.gentoo.org with esmtp (Exim 4.60)
(envelope-from <gentoo-user+bounces-133502-garchives=archives.gentoo.org@lists.gentoo.org>)
id 1RjMTr-0003jx-Mm
for garchives@archives.gentoo.org; Sat, 07 Jan 2012 02:58:03 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
by pigeon.gentoo.org (Postfix) with SMTP id 0CF6621C053;
Sat, 7 Jan 2012 02:57:52 +0000 (UTC)
Received: from mail-ee0-f53.google.com (mail-ee0-f53.google.com [74.125.83.53])
by pigeon.gentoo.org (Postfix) with ESMTP id E7669E0021
for <gentoo-user@lists.gentoo.org>; Sat, 7 Jan 2012 02:56:50 +0000 (UTC)
Received: by eekd41 with SMTP id d41so1443320eek.40
for <gentoo-user@lists.gentoo.org>; Fri, 06 Jan 2012 18:56:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=mime-version:from:date:message-id:subject:to:content-type;
bh=/blU56bi7gQ+JZdPN+XUMv8oPCWN+4nES88I6BbpF2w=;
b=DSwUyZ9KRZhlIUL38hmbwR1ZRY4xiHAToAV49RYado5zQB5qFke2ZKrRpYLocnRllu
BrU2V/qfvbMki+pDXxcm7ffhMCr1s4Za5fCnaR2pUBQqHmQ7woY7mMpEoyNU1wrvw7kt
ToCHlOyi0+rT6X0ACQlDN1Z508aFLhiqeBmyg=
Received: by 10.213.14.196 with SMTP id h4mr1621972eba.59.1325905009192; Fri,
06 Jan 2012 18:56:49 -0800 (PST)
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
MIME-Version: 1.0
Received: by 10.213.35.16 with HTTP; Fri, 6 Jan 2012 18:56:28 -0800 (PST)
From: Andrey Moshbear <andrey.vul@gmail.com>
Date: Fri, 6 Jan 2012 21:56:28 -0500
Message-ID: <CAFnZeoQtMBqTrcMECcmy3QXbfG9m817G2GyQV6=vs5PgnAYezA@mail.gmail.com>
Subject: [gentoo-user] pidgin, ssl, and xmpp
To: gentoo-user <gentoo-user@lists.gentoo.org>
Content-Type: text/plain; charset=UTF-8
X-Archives-Salt: 193ca059-a9bf-4413-9f05-74ce85c769e6
X-Archives-Hash: 67106f9dce77b9857ade8056d3a4c522
With the following pidgin debug log:
21:46:56) account: Connecting to account XXX@gmail.com/.
(21:46:56) connection: Connecting. gc = 0x1d44780
(21:46:56) dnssrv: querying SRV record for gmail.com:
_xmpp-client._tcp.gmail.com
(21:46:56) dnssrv: found 5 SRV entries
(21:46:56) dnsquery: Performing DNS lookup for xmpp.l.google.com
(21:46:56) dns: Successfully sent DNS request to child 805
(21:46:56) dns: Got response for 'xmpp.l.google.com'
(21:46:56) dnsquery: IP resolved for xmpp.l.google.com
(21:46:56) proxy: Attempting connection to 209.85.225.125
(21:46:56) proxy: Connecting to xmpp.l.google.com:5222 with no proxy
(21:46:56) proxy: Connection in progress
(21:46:56) proxy: Connecting to xmpp.l.google.com:5222.
(21:46:56) proxy: Connected to xmpp.l.google.com:5222.
(21:46:56) jabber: Sending (XXX@gmail.com): <?xml version='1.0' ?>
(21:46:56) jabber: Sending (XXX@gmail.com): <stream:stream
to='gmail.com' xmlns='jabber:client'
xmlns:stream='http://etherx.jabber.org/streams' version='1.0'>
(21:46:56) jabber: Recv (138): <stream:stream from="gmail.com"
id="0A69C2453F195AB0" version="1.0"
xmlns:stream="http://etherx.jabber.org/streams" xmlns="jabber:client">
(21:46:56) jabber: Recv (241): <stream:features><starttls
xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><mechanisms
xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>X-GOOGLE-TOKEN</mechanism><mechanism>X-OAUTH2</mechanism></mechanisms></stream:features>
(21:46:56) jabber: Sending (XXX@gmail.com): <starttls
xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
(21:46:56) jabber: Recv (50): <proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>
(21:46:56) gnutls: Starting handshake with gmail.com
(21:46:56) util: Writing file prefs.xml to directory /home/XXX/.purple
(21:46:56) util: Writing file /home/XXX/.purple/prefs.xml
(21:46:56) gnutls: Handshake complete
(21:46:56) gnutls/x509: Key print:
0c:99:2a:04:72:48:59:1a:3c:cf:ab:60:d0:2a:9e:73:73:42:f0:08
(21:46:56) gnutls/x509: Key print:
dd:7a:7f:13:1d:db:a3:3d:3e:86:70:17:94:83:e6:fe:a6:98:7d:6a
(21:46:56) gnutls: Peer provided 2 certs
(21:46:56) gnutls: Lvl 0 SHA1 fingerprint:
0c:99:2a:04:72:48:59:1a:3c:cf:ab:60:d0:2a:9e:73:73:42:f0:08
(21:46:56) gnutls: Serial: 6d:ca:e4:9f:00:03:00:00:34:be
(21:46:56) gnutls: Cert DN: C=US,ST=California,L=Mountain
View,O=Google Inc.,CN=gmail.com
(21:46:56) gnutls: Cert Issuer DN: C=US,O=Google Inc,CN=Google
Internet Authority
(21:46:56) gnutls: Lvl 1 SHA1 fingerprint:
dd:7a:7f:13:1d:db:a3:3d:3e:86:70:17:94:83:e6:fe:a6:98:7d:6a
(21:46:56) gnutls: Serial: 0b:67:71
(21:46:56) gnutls: Cert DN: C=US,O=Google Inc,CN=Google Internet Authority
(21:46:56) gnutls: Cert Issuer DN: C=US,O=Equifax,OU=Equifax Secure
Certificate Authority
(21:46:56) certificate/x509/tls_cached: Starting verify for gmail.com
(21:46:56) certificate/x509/tls_cached: Checking for cached cert...
(21:46:56) certificate/x509/tls_cached: ...Found cached cert
(21:46:56) gnutls: Attempting to load X.509 certificate from
/home/XXX/.purple/certificates/x509/tls_peers/gmail.com
(21:46:56) certificate/x509/tls_cached: Peer cert matched cached
(21:46:56) util: Writing file
/home/XXX/.purple/certificates/x509/tls_peers/gmail.com
(21:46:56) certificate: Successfully verified certificate for gmail.com
(21:46:56) jabber: Sending (ssl) (XXX@gmail.com): <stream:stream
to='gmail.com' xmlns='jabber:client'
xmlns:stream='http://etherx.jabber.org/streams' version='1.0'>
(21:46:56) jabber: Recv (ssl)(138): <stream:stream from="gmail.com"
id="6C45C0A9313259E1" version="1.0"
xmlns:stream="http://etherx.jabber.org/streams" xmlns="jabber:client">
(21:46:56) jabber: Recv (ssl)(197): <stream:features><mechanisms
xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>PLAIN</mechanism><mechanism>X-GOOGLE-TOKEN</mechanism><mechanism>X-OAUTH2</mechanism></mechanisms></stream:features>
(21:46:56) sasl: sasl_state is -1, failing the mech and trying again
(21:46:56) connection: Connection error on 0x1d44780 (reason: 3
description: Server does not use any supported authentication method)
(21:46:57) account: Disconnecting account XXX@gmail.com/ (0x1a3dbb0)
(21:46:57) connection: Disconnecting connection 0x1d44780
(21:46:57) jabber: Sending (ssl) (XXX@gmail.com): </stream:stream>
(21:46:57) connection: Destroying connection 0x1d44780
and USE flags:
dev-libs/cyrus-sasl-2.1.25 berkdb gdbm java kerberos mysql pam
postgres sqlite ssl -authdaemond -elibc_FreeBSD -ldapdb -openldap
-sample -srp -static-libs -urandom
net-im/pidgin-2.10.1 dbus debug doc gnutls gstreamer gtk idn ncurses
nls perl python sasl spell tcl tk xscreensaver -eds -gadu -groupwise
-meanwhile -networkmanager -prediction -silc -zephyr -zeroconf
net-libs/gnutls-2.10.5 cxx doc lzo nls zlib -bindist -examples -guile -test
where exactly is the SSL problem?