Bug #545

avatar

Connecting to irc.tinfoilnet.nu with SSL fails

Added by Mirco Bauer 4916 days ago. Updated 3802 days ago.

Status:Closed Start:11/08/2010
Priority:Normal Due date:
Assigned to:avatarMirco Bauer % Done:

100%
Category:Engine IRC
Target version:-
Complexity:

 Found in Version:
Votes: 0

Description

19:27:22 <troll> 19:26 -!- Connecting to irc.tinfoilnet.nu port 6697...
19:27:22 <troll> 19:26 -!- Connection to irc.tinfoilnet.nu established
19:27:22 <troll> 19:26 -!- Logging in...
19:27:22 <troll> 19:26 -!- Disconnected from irc.tinfoilnet.nu
19:27:23 <troll> 19:26 -!- Disconnected from irc.tinfoilnet.nu
19:27:23 <troll> 19:26 -!- Disconnected from irc.tinfoilnet.nu
19:27:23 <troll> 19:26 -!- Disconnected from irc.tinfoilnet.nu
19:27:26 <troll> this is what i get

Related issues

related to Smuxi - Bug #640 Validation of certificates always fail New 11/01/2011

History

Updated by Mirco Bauer 4539 days ago

avatar
With Smuxi from git this is working:
15:06 !irc.alt.eldslott.org Welcome to tinfoilnet.nu!
15:06 !irc.alt.eldslott.org *** You are connected using SSL cipher "RSA-AES-256-CBC-SHA1"

The issue was probably that the server has to be added to preferences also it will try to connect to the IRCd on the SSL port but without SSL which leads to an protocol error. Smuxi should either support all options from Quick Connect correctly or at least disable/hide the unsupported fields! This also makes testing difficult as the user believes Smuxi is actually using the changed values but it still uses the values from the config instead.

Updated by Mirco Bauer 4539 days ago

avatar

Actually the issue seems to be the IRC server you connect to, some servers of tinfoilnet work others not...

Updated by Mirco Bauer 4539 days ago

avatar

And it seems like SSL is mandatory for this network.

host -t A irc.tinfoilnet.nu
irc.tinfoilnet.nu has address 90.231.251.186
irc.tinfoilnet.nu has address 79.99.0.65
Servers that work:
  • irc.alt.eldslott.org
Server that don't work:
  • irc.jordslott.org

Updated by Mirco Bauer 4539 days ago

avatar

Both servers use pretty broken certificates but I don't see a specific reason why one of them works while the other does not:

meebey@redhorse:~/tmp$ ./tlstest.exe https://irc.alt.eldslott.org:6697

https://irc.alt.eldslott.org:6697
[Subject]
  CN=irc.tinfoilnet.nu, O=tinfoilnet, L=NA, S=NA, C=SE

[Issuer]
  CN=irc.tinfoilnet.nu, O=tinfoilnet, L=NA, S=NA, C=SE

[Not Before]
  5/13/2009 8:24:03 PM

[Not After]
  6/12/2009 8:24:03 PM

[Thumbprint]
  302B7BA7217410A90DAE453425D00E040BD1E04E

    Valid From:  5/13/2009 8:24:03 PM
    Valid Until: 6/12/2009 8:24:03 PM

Error #-2146762481: CERT_E_CN_NO_MATCH 0x800B010F
Error #-2146762487: CERT_E_UNTRUSTEDROOT 0x800B0109

meebey@redhorse:~/tmp$ ./tlstest.exe https://irc.jordslott.org:6697

https://irc.jordslott.org:6697
[Subject]
  CN=irc.jordslott.org, S=SE, OU=tinadmin, O=TinfoilNET, C=Sweden

[Issuer]
  CN=irc.jordslott.org, S=SE, OU=tinadmin, O=TinfoilNET, C=Sweden

[Not Before]
  12/22/2010 9:54:12 PM

[Not After]
  11/21/2012 9:54:12 PM

[Thumbprint]
  584E3D2A3A2F249FBC86E4BD43B4B655A04397EF

    Valid From:  12/22/2010 9:54:12 PM
    Valid Until: 11/21/2012 9:54:12 PM

Error #-2146762490: CERT_E_PURPOSE 0x800B0106
Error #-2146762487: CERT_E_UNTRUSTEDROOT 0x800B0109

Updated by Mirco Bauer 4522 days ago

avatar
  • Target version changed from 0.8.9 to 0.10

Updated by Mirco Bauer 3802 days ago

avatar
  • Status changed from New to Closed
  • Target version deleted (0.10)
  • % Done changed from 0 to 100

Works now for me on Smuxi 0.10-dev and Mono 2.10.8 with disabled "Validate Certificate"

Also available in: Atom PDF