TLS connectivity issue

[i.galic@…]

I'm experiencing trouble connecting via BitlBee to an XMPP service provided by a Zimbra Server:

jabber(i.galic@brainsware.org) - Logging in: Connecting
jabber(i.galic@brainsware.org) - Logging in: Connected to server, logging in
jabber(i.galic@brainsware.org) - Logging in: Converting stream to TLS
jabber(i.galic@brainsware.org) - Logging in: Connected to server, logging in
jabber(i.galic@brainsware.org) - Couldn't log in: XML stream error
jabber(i.galic@brainsware.org) - Logging in: Signing off..
jabber(i.galic@brainsware.org) - Logging in: Reconnecting in 900 seconds..

I have enabled xmlconsole:

TX: <?xml version='1.0' ?><stream:stream to="brainsware.org" xmlns="jabber:client" xmlns:stream="http://etherx.jabber.org/streams" 
                   version="1.0">
RX: <stream:features><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"></starttls><mechanisms 
                   xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>PLAIN</mechanism></mechanisms><compression 
                   xmlns="http://jabber.org/features/compress"><method>zlib</method></compression><auth 
                   xmlns="http://jabber.org/features/iq-auth"/></stream:features>
TX: <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>
RX: <proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>
TX: <?xml version='1.0' ?><stream:stream to="brainsware.org" xmlns="jabber:client" xmlns:stream="http://etherx.jabber.org/streams" 
                   version="1.0">
TX: </stream:stream>

At first I thought this was related to #437, but it seems not to be, as I'm not even able to login.

wilmer has looked into this on IRC, and asked me to open this ticket. To repro:

auto_connect = `true'
auto_reconnect = `true'
password is empty
username = `i.galic@brainsware.org'
port = `5222'
priority = `0'
resource = `BitlBee'
resource_select = `priority'
server = `mail.brainsware.org'
ssl = `false'
tls = `try'
xmlconsole = `true'

[i.galic@…]

I wanted to add, that it does work with the following settings:

02:52 <@root> auto_connect = `1'
02:52 <@root> auto_reconnect = `true'
02:52 <@root> password is empty
02:52 <@root> username = `i.galic@brainsware.org'
02:52 <@root> port = `5223'
02:52 <@root> priority = `0'
02:52 <@root> resource = `BitlBee'
02:52 <@root> resource_select = `priority'
02:52 <@root> server = `mail.brainsware.org'
02:52 <@root> ssl = `true'
02:52 <@root> tls = `try'
02:52 <@root> xmlconsole = `false'

[anonymous]

I had the same problem. TLS worked fine with other clients, had to use SSL for bitlbee though.

[wilmer]

Sorry for taking so long. In the end someone else came to #bitlbee with the same problem and I root-caused it (#547). The fix is now checked in, changeset:devel,504. Sorry for taking so long with the actual fix. :-(