#265 Constant disconnect (every few seconds or minutes)

[tcz8]

My setup:

pidgin 2.10.9
pidgin-sipe 1.18.3
Xubuntu 14.04.1 LTS

Log file:

I would like to include the log file but I want to remove my password first and I cant find "Authentication: Basic <base64 string="">" in the log anywhere. Is this info still valid?</base64>

Problem:

Everything would be working fine if it wasn't for the constant disconnections. I can chat, send and receive files, see who is online and statuses change properly but I can never stay connected for more than a few seconds or minutes at a time.

Others on the network use Lync 2013 and are not having this issue.

The logs show this when disconnecting:
(11:07:23) g_log: purple_status_is_online: assertion 'status != NULL' failed
(11:07:51) sipe: Read error: Connection reset by peer (104)

I also noticed a bunch of glib errors and random issues writing to accounts.xml.save and blist.xml.save. Tried to investigate those write errors using strace and it seems the pidgin process is trying to access them after they went through a munmap but I'm new to the whole strace thing so I may not be interpreting correctly..

Thank you for your help.
Fred.

[tcz8]

And FYI I did try to set NSS_SSL_CBC_RANDOM_IV=0

[Stefan Becker]

Please read the FAQ -> closing as NOTABUG.

If you can provide a --debug log that proves this is not caused by the Microsoft SSL BEAST mitigation bug, then I'll consider to reopen it.

[Stefan Becker]

Well, if the log says

(11:07:51) sipe: Read error: Connection reset by peer (104)

then the disconnect is not initiated by SIPE.

To prove that NSS_SSL_CBC_RANDOM_IV=0 is actually enabled you should verify it with ssldump or wireshark. You should not see SSL packages with two data records in them, the first one being a 32 byte long one.

Please also make sure that on your platform Pidgin has been compiled with NSS and not with GnuTLS. The environment variable only works with NSS.

[tcz8]

Good info thank you, I'll verify all this. In the mean time, what about removing my password from the logs? I just cant find the string you mention.

[Stefan Becker]

I thought "Please make sure that you don't reveal any of your passwords in the log. Please make sure to replace the Base64 string in "Authentication: Basic <base64 string="">" lines, as those contain the user name and password in obfuscated form." is clear: make sure your password is not contained in clear form nor in Authentication: Basic form.</base64>