Re: [pyOpenSSL] cannot connect to XMPP server with gajim (using pyOpenSSL)

[Matěj C. <mc...@re...>]

Dne 13.10.2009 19:21, ex...@tw... napsal(a):
> There are some known interoperability issues between OpenSSL and the SSL
> libraries used by some Java XMPP services.  If this is the problem, you
> can work around it by setting the OP_NO_TICKET (0x00004000) option in
> the client.  If this doesn't fix the problem, then I don't have any
> other guesses as to what might be wrong.

tcpsock._sslObj.get_context().set_options(OpenSSL.SSL.OP_NO_TICK)

bradford:gajim$ git diff HEAD^1
diff --git a/src/common/xmpp/tls_nb.py b/src/common/xmpp/tls_nb.py
index 5ed1072..e7302a1 100644
--- a/src/common/xmpp/tls_nb.py
+++ b/src/common/xmpp/tls_nb.py
@@ -359,6 +359,7 @@ class NonBlockingTLS(PlugIn):
    tcpsock._sslObj = OpenSSL.SSL.Connection(tcpsock._sslContext,
       tcpsock._sock)
    tcpsock._sslObj.set_connect_state() # set to client mode
+   tcpsock._sslObj.get_context().set_options(OpenSSL.SSL.OP_NO_TICK
    wrapper = PyOpenSSLWrapper(tcpsock._sslObj)
    tcpsock._recv = wrapper.recv
    tcpsock._send = wrapper.send

(indenting got screwed up in the email)

But no observeable change happened.

Matěj

P.S.: BTW, would it be possible to add this list to gmane.org? I prefer
it much for dealing with email lists.
-- 
http://www.ceplovi.cz/matej/, Jabber: mcepl<at>ceplovi.cz
GPG Finger: 89EF 4BC6 288A BF43 1BAB  25C3 E09F EF25 D964 84AC

Those to whom evil is done \\ Do evil in return.
    -- W. H. Auden, September 1, 1939
       http://www.poets.org/viewmedia.php/prmMID/15545