Pidgin can't connect to XMPP server from new laptop

[Steve Corwin]

Update: since the error message mentions nss, I decided to try running 
without it.  I compiled v2.10.7 from source, like this:

$ ./configure --disable-nss
$ make
$ sudo make install

There were no errors, and afterwards there was a file 
/usr/local/bin/pidgin with a timestamp showing that it had just been 
created.

However after running
PURPLE_GNUTLS_PRIORITIES="stbeehive.oracle.com=NORMAL:%COMPAT:-VERS-TLS1.2:-VERS-TLS1.1" 
/usr/local/bin/pidgin --debug

I see the same error:
(14:47:24) jabber: Recv (50): <proceed 
xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>
(14:47:24) nss: Handshake failed  (-12268)
(14:47:24) connection: Connection error on 0x1dccd60 (reason: 5 
description: SSL Handshake Failed)

-Steve

On 07/02/2013 09:30 AM, Steve Corwin wrote:
> Hi,
>
> I've been using Pidgin to connect to the company XMPP server for a 
> couple of years.  Recently I got a new laptop, and with this one 
> Pidgin keeps reporting "SSL Handshake Failed".  I found a matching 
> entry in the FAQ but the suggestion didn't help.
>
> Here's the relevant-looking section of the log file after running
> PURPLE_GNUTLS_PRIORITIES="stbeehive.oracle.com=NORMAL:%COMPAT:-VERS-TLS1.2:-VERS-TLS1.1" 
> /usr/bin/pidgin --debug
>
> (17:09:54) jabber: Sending (steve at shopzilla.com/Laptop): <?xml 
> version='1.0' ?>
> (17:09:54) jabber: Sending (steve at shopzilla.com/Laptop): 
> <stream:stream to='shopzilla.com' xmlns='jabber:client' 
> xmlns:stream='http://etherx.jabber.org/streams' version='1.0'>
> (17:09:54) jabber: Recv (186): <?xml version='1.0' 
> encoding='UTF-8'?><stream:stream 
> xmlns:stream="http://etherx.jabber.org/streams" xmlns="jabber:client" 
> from="shopzilla.com" id="80034467" xml:lang="en" version="1.0">
> (17:09:54) jabber: Recv (233): <stream:features><starttls 
> xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><mechanisms 
> xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms></stream:features> 
>
> (17:09:54) jabber: Sending (steve at shopzilla.com/Laptop): <starttls 
> xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
> (17:09:54) jabber: Recv (50): <proceed 
> xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>
> (17:09:54) nss: Handshake failed  (-12268)
> (17:09:54) connection: Connection error on 0x7f8284998410 (reason: 5 
> description: SSL Handshake Failed)
>
> The laptop is running Ubuntu 12.04 64bit.  Pidgin is "Pidgin 2.10.7 
> (libpurple 2.10.7)".  I'm currently using Kopete so I know it's 
> possible to connect from this laptop.  Kopete's notifications are 
> driving me nuts so I'd really like to get Pidgin working.  Any 
> suggestions would be appreciated.
>
> Thanks,
> Steve