Sipe cannot register - server sends TCP reset after client TLS change cipher handshake.

[gitet]

Hi all!

I need some help connecting pidgin+sipe (from sipe-collab ppa) to lync server at work.
Client is installed on Ubuntu 15.10.

I am able to connect to the lync server with a client running on Ubuntu 14.04 (pidgin 2.10.9-0ubuntu3.2 + pidgin-sipe 1.17.3-1 need to delete/re-add sip server SSL cert manually though, this seems to be a known bug) using SSL/TLS+NTLM, so it should work with the packages installed from the collab PPA...but for some reason it just won't work; I am not even able to register with the server.

Adding the SIP server ssl cert manually (Tools-> Certificates -> Open ...) does not make any difference.

I suspect something is wrong with the way TLS and/or certs are handled by the client, but I might of course be wrong about that.

Any thoughts on how to fix my problem would be much appreciated :-)

Attached: pcap file showing the problem + scrubbed logfile w/list of installed debs.

Best regards,
/Espen

change cipher spec - reset.pcapng.zip

pidgin.log.zip

[xhaakon]

Have you tried this? If you're using pidgin-sipe from distribution package or sipe-collab PPA, you can just uncomment the NSS_SSL_CBC_RANDOM_IV line in /etc/default/pidgin-sipe.

[gitet]

Setting NSS_SSL_CBC_RANDOM_IV=0 does not help. Also, the version of pidgin+sipe plugin from ubuntu 14.04 works fine without setting this variable to 0.