[Pidgin] #1435: server handshake failes due to cipher spec mismatch

[Pidgin]

#1435: server handshake failes due to cipher spec mismatch
---------------------------+------------------------------------------------
 Reporter:  bastischubert  |        Owner:  deryni   
     Type:  defect         |       Status:  closed   
Milestone:  2.5.2          |    Component:  libpurple
  Version:  2.0.1          |   Resolution:  fixed    
 Keywords:  cipher specs   |  
---------------------------+------------------------------------------------

Comment(by deryni):

 One of two things is happening when gajim connects. Either it tries a TLS
 connection without checking if the server supports it (which is absolutely
 broken behavior and seems unlikely to me) or gajim is intending to use TLS
 when it starts the connection, discovers that the server doesn't support
 it and (either silently or in a way you don't notice) falls back to not
 using TLS and continues normally.

 Your selection of the 'require TLS' option prevents pidgin from falling
 back to using a non-TLS connection to the server when it determines that
 the server doesn't support it, thus the error message you are receiving.

 If gajim has a debug/xml log you may be able to check that to see if it is
 in fact negotiating a TLS connection or not, if it doesn't or it doesn't
 indicate one way or the other than a tool like wireshark will tell you.

 There is actually one other possibility, which is that gajim is in fact
 using port 5223 and and old-style SSL connection rather than using
 starttls over 5222.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/1435#comment:19>
Pidgin <http://pidgin.im>
Pidgin