SSL Issue #8

Closed
pallan opened this Issue Mar 9, 2012 · 4 comments

3 participants

@pallan

We are trying to connect Hubot to our internal jabber server but are getting the following error

events.js:48
        throw arguments[1]; // Unhandled 'error' event
                       ^
Error: 139977127081760:error:1411809D:SSL routines:SSL_CHECK_SERVERHELLO_TLSEXT:tls invalid ecpointformat list:t1_lib.c:1473:
139977127081760:error:14092113:SSL routines:SSL3_GET_SERVER_HELLO:serverhello tlsext:s3_clnt.c:946:

    at CleartextStream._pusher (tls.js:508:24)
    at CleartextStream._push (tls.js:334:25)
    at SecurePair.cycle (tls.js:734:20)
    at EncryptedStream.write (tls.js:130:13)
    at Socket.ondata (stream.js:38:26)
    at Socket.emit (events.js:67:17)
    at TCP.onread (net.js:347:14)

We suspect this is likely something to do with the OpenSSL libs on the server we are trying to get Hubot to run on. However we have hit a wall trying to figure it out and are reaching out for some help

@markstory
Owner

I've never seen that error before, and the stack trace looks like its coming off of an event fired when creating the initial connection.

@pallan

That is exactly when its happening. On my MacBook (10.7) it connects no problem. Exact same settings on this openSuse server does not.

@frost-nzcr4

Also have this issue when my XMPP server allow to use secure and unsecure connections. By default hubot-xmpp create Client which try to connect as unsecure but in node-xmpp allowTLS option is always set to true. So server expected secure connection (function Connection.prototype.onStanza on line 250 this.setSecure();) but not received it and send error. In my case I got an error after 6 minute of waiting (SSL connection timeout?).

As workaround I change allowTLS in node-xmpp/lib/xmpp/connection.js to false:

Connection.prototype.allowTLS = false;
@markstory
Owner

Closing as this is pretty old and there have been a few SSL related fixes in the past 2 years. If this is still a problem a new issue can be opened, or this one can be re-opened.

@markstory markstory closed this May 14, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment