handshake failure

[Eion Robb]

Hi Lindel,

That particular NSS Handshake failed -5938 error means that the SSL library
in Pidgin couldn't negotiate a matching SSL cipher with your server.
You'll need to use the "NSS Preferences" plugin (in Tools->Plugins) to
configure what ciphers and version of TLS/SSL your Pidgin is allowed to use
to connect with the server.

Cheers,
Eion

On 2 May 2017 at 03:12, Lindel Hancock <lindel at handytv.com> wrote:

> I have been using pidgin for a while now at work.   Last thurday all was
> working fine.  Friday the users at this location can not connect. Error
> says SSL handshake failed.  Other locations connect fine still.
>
> Here is the debug info.  Can you help?
>
>
>
> Thanks
>
> Lindel
>
>
>
> (10:06:30) *network:* found network ''
> (10:06:30) *network:* Received Network Change Notification. Current
> network count is 1, previous count was 1.
> (10:06:30) *autorecon:* do_signon called
> (10:06:30) *autorecon:* calling purple_account_connect
> (10:06:30) *account:* Connecting to account lindel at handytv.com/handy.
> (10:06:30) *connection:* Connecting. gc = 077BD3C8
> (10:06:30) *dnsquery:* Performing DNS lookup for mail.handytv.com
> (10:06:30) *autorecon:* done calling purple_account_connect
> (10:06:30) *dnsquery:* IP resolved for mail.handytv.com
> (10:06:30) *proxy:* Attempting connection to 216.170.94.206
> (10:06:30) *proxy:* Connecting to mail.handytv.com:5222 with no proxy
> (10:06:30) *proxy:* Connection in progress
> (10:06:30) *proxy:* Connecting to mail.handytv.com:5222.
> (10:06:30) *proxy:* Connected to mail.handytv.com:5222.
> (10:06:30) *jabber:* Sending (lindel at handytv.com/handy): <?xml
> version='1.0' ?>
> (10:06:30) *jabber:* Sending (lindel at handytv.com/handy): <stream:stream
> to='handytv.com' xmlns='jabber:client' xmlns:stream='http://etherx.
> jabber.org/streams' version='1.0'>
> (10:06:30) *jabber:* Recv (170): <?xml version='1.0'?><stream:stream
> from='handytv.com' xmlns='jabber:client' xmlns:stream='http://etherx.
> jabber.org/streams' xml:lang='en' id='xmpp_659619' version='1.0'>
> (10:06:30) *jabber:* Recv (263): <stream:features><auth xmlns='
> http://jabber.org/features/iq-auth'/><starttls
> xmlns='urn:ietf:params:xml:ns:xmpp-tls'/><mechanisms
> xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>DIGEST-
> MD5</mechanism><mechanism>PLAIN</mechanism></mechanisms></stream:features>
> (10:06:30) *jabber:* Sending (lindel at handytv.com/handy): <starttls
> xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
> (10:06:30) *jabber:* Recv (50): <proceed xmlns='urn:ietf:params:xml:ns:
> xmpp-tls'/>
> (10:06:30) *nss:* Handshake failed (-5938)
> (10:06:30) *connection:* Connection error on 077BD3C8 (reason: 5
> description: SSL Handshake Failed)
> (10:06:30) *account:* Disconnecting account lindel at handytv.com/handy
> (00480F88)
> (10:06:30) *connection:* Disconnecting connection 077BD3C8
> (10:06:30) *connection:* Destroying connection 077BD3C8
> (10:06:36) *util:* Writing file accounts.xml to directory
> C:\Users\Handy\AppData\Roaming\.purple
> (10:06:36) *util:* Writing file C:\Users\Handy\AppData\
> Roaming\.purple\accounts.xml
> (10:06:40) *autorecon:* do_signon called
> (10:06:40) *autorecon:* calling purple_account_connect
> (10:06:40) *account:* Connecting to account lindel at handytv.com/handy.
> (10:06:40) *connection:* Connecting. gc = 077BDA08
> (10:06:40) *dnsquery:* Performing DNS lookup for mail.handytv.com
> (10:06:40) *autorecon:* done calling purple_account_connect
> (10:06:40) *dnsquery:* IP resolved for mail.handytv.com
> (10:06:40) *proxy:* Attempting connection to 216.170.94.206
> (10:06:40) *proxy:* Connecting to mail.handytv.com:5222 with no proxy
> (10:06:40) *proxy:* Connection in progress
> (10:06:40) *proxy:* Connecting to mail.handytv.com:5222.
> (10:06:40) *proxy:* Connected to mail.handytv.com:5222.
> (10:06:40) *jabber:* Sending (lindel at handytv.com/handy): <?xml
> version='1.0' ?>
> (10:06:40) *jabber:* Sending (lindel at handytv.com/handy): <stream:stream
> to='handytv.com' xmlns='jabber:client' xmlns:stream='http://etherx.
> jabber.org/streams' version='1.0'>
> (10:06:41) *jabber:* Recv (170): <?xml version='1.0'?><stream:stream
> from='handytv.com' xmlns='jabber:client' xmlns:stream='http://etherx.
> jabber.org/streams' xml:lang='en' id='xmpp_341377' version='1.0'>
> (10:06:41) *jabber:* Recv (263): <stream:features><auth xmlns='
> http://jabber.org/features/iq-auth'/><starttls
> xmlns='urn:ietf:params:xml:ns:xmpp-tls'/><mechanisms
> xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>DIGEST-
> MD5</mechanism><mechanism>PLAIN</mechanism></mechanisms></stream:features>
> (10:06:41) *jabber:* Sending (lindel at handytv.com/handy): <starttls
> xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
> (10:06:41) *jabber:* Recv (50): <proceed xmlns='urn:ietf:params:xml:ns:
> xmpp-tls'/>
> (10:06:41) *nss:* Handshake failed (-5938)
> (10:06:41) *connection:* Connection error on 077BDA08 (reason: 5
> description: SSL Handshake Failed)
> (10:06:41) *account:* Disconnecting account lindel at handytv.com/handy
> (00480F88)
> (10:06:41) *connection:* Disconnecting connection 077BDA08
> (10:06:41) *connection:* Destroying connection 077BDA08
> (10:06:47) *util:* Writing file accounts.xml to directory
> C:\Users\Handy\AppData\Roaming\.purple
> (10:06:47) *util:* Writing file C:\Users\Handy\AppData\
> Roaming\.purple\accounts.xml
>
> _______________________________________________
> Support at pidgin.im mailing list
> Want to unsubscribe?  Use this link:
> https://pidgin.im/cgi-bin/mailman/listinfo/support
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pidgin.im/pipermail/support/attachments/20170502/bbca2419/attachment.html>