NetBSD Problem Report #55950
From adrian@mx.aik.onl Sat Jan 23 12:26:52 2021
Return-Path: <adrian@mx.aik.onl>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
by mollari.NetBSD.org (Postfix) with ESMTPS id 52D351A923C
for <gnats-bugs@gnats.NetBSD.org>; Sat, 23 Jan 2021 12:26:52 +0000 (UTC)
Message-Id: <20210123122144.BA55F27221@www3.kiess.onl>
Date: Sat, 23 Jan 2021 13:21:44 +0100 (CET)
From: adrian@mx.aik.onl
Reply-To: adrian@kiess.onl
To: gnats-bugs@NetBSD.org
Subject: Tkabber does not support TLS encryption
X-Send-Pr-Version: 3.95
>Number: 55950
>Category: pkg
>Synopsis: TKabber does not support TLS encryption
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: pkg-manager
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Sat Jan 23 12:30:00 +0000 2021
>Originator: Adrian Immanuel Kiess
>Release: NetBSD 9.1
>Organization:
>Environment:
System: NetBSD www3.kiess.onl 9.1 NetBSD 9.1 (GENERIC) #0: Sun Oct 18 19:24:30 UTC 2020 mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/amd64/compile/GENERIC amd64
Architecture: x86_64
Machine: amd64
>Description:
The Tkabber from the pkgsrc binaries is version 0.11.1 and does not support/compiled without SSL/TLS encryption at all. Please bump the TKabber version to the newest one, which seems to be version 1.1.2 and compile it with TLS support for the pkgsrc binaries.
In addition to that, please make sure the ca certpath is set correctly to a valid default directory (e.g. /etc/openssl/certs on NetBSD) as the version of Tkabber from FreeBSD seems to cannot find the ca certpath and aborts connections with the "Connot get local issuer" error.
I think it is imposible to use the Tkabber version 0.11.1 from pkgsrc with newer XMPP/Jabber server setups, which mostly require connections over secure TLS encryption.
Thank you very much for your kind attention.
Sincerely,
Adrian Kiess
>How-To-Repeat:
Start Tkabber from the pkgsrc-2020Q4 binaries on NetBSD 9.1/amd64 an try to connect with STARTTLS option enabled. It does not work, since there is no encryption pane in the connection dialog of Tkabber. The recent version of Tkabber from Debian works fine, and allows encryption settings (STARTTLS) for a connection over TLS encryption.
>Fix:
Newer Tkabber version with TLS support enabled
>Unformatted:
(Contact us)
$NetBSD: query-full-pr,v 1.46 2020/01/03 16:35:01 leot Exp $
$NetBSD: gnats_config.sh,v 1.9 2014/08/02 14:16:04 spz Exp $
Copyright © 1994-2020
The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.