Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-15150

Yabber SSL/TLS certification

    XMLWordPrintable

Details

    Description

      Im using phpBB 3.2 and while trying the yabber function I encountered this debug error and functional problems.

      [phpBB Debug] PHP Warning: in file [ROOT]/includes/functions_jabber.php on line 573: stream_socket_enable_crypto(): Peer certificate CN=`danwin1210.me' did not match expected CN=`danwin1210.me.danwin1210.me'
      

      Which is strange since I have specified the yabber settings as follows.

      Jabber server:danwin1210.me
      Jabber username or JID:username
      Jabber password:password
      SSL: Off

      Using this server with SSL on Pidgin shows that danwin1210.me uses a valid and verified SSL certificate.

      It`s as if phpBB things it has to verify danwin1210.me, but instead tries to verify "danwin1210.me.danwin1210.me" for some reason.

      As in this example I have not selected SSL, But phpBB3 still connects and checks its cert. I guess this is a yabber server-side function of forcing SSL.

      But when I do try to select SSL in acp for this module I simple get a connect error.

      Could not connect to Jabber server.
       
      Error: open_socket() - Connection refused
       
      Error: connect() #2
      

      Summary:

      1: Validating to wrong domain or the validation function is not working in phpBB.
      2: The SSL function in the modules does not work, non-ssl function requests server cert instead. Like the switches for hot and cold have been labelled wrong.

      Fixes: Found this which seems to be spot on.
      https://tracker.phpbb.com/browse/PHPBB3-13558

      Attachments

        Activity

          People

            Marc Marc
            DoYouSpeakWak DoYouSpeakWak [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: