Invalid certificate trust chain error

415 views
Skip to first unread message

Dark Archon

unread,
Aug 29, 2017, 11:44:47 AM8/29/17
to SleekXMPP Discussion
I have create Issue 1093 on Errbot. I am unable to connect to an XMPP server due to Invalid certificate trust chain error. The SleekXMPP version is 1.3.2 and OpenSSL is at 1.0.1f.

The SSL version defaults to ssl.PROTOCOL_TLSv1 in xmlstream.py. I have manually tried other values (ssl.PROTOCOL_SSLv23, ssl.PROTOCOL_SSLv3 , ssl.PROTOCOL_TLSv1_1, and ssl.PROTOCOL_TLSv1_2), but I get the same invalid certificate trust error. 

Any idea why I am unable to set ssl.PROTOCOL_SSLv2 (object has no attribute error)? 

What can I do troubleshoot this further? 

09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst Connecting to 13.122.30.11:5222
09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst Event triggered: connected
09:26:09 DEBUG    sleekxmpp.thirdparty.stat  ==== TRANSITION disconnected -> connected
09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst Starting HANDLER THREAD
09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst Loading event runner
09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst SEND (IMMED): <stream:stream to='supportchat.comp.com' xmlns:stream='http://etherx.jabber.org/streams' xmlns='jabber:client' xml:lang='en' version='1.0'>
09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst RECV: <stream:stream from="supportchat.comp.com" version="1.0" id="cf6f297f" xml:lang="en">
09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst RECV: <stream:features xmlns="http://etherx.jabber.org/streams"><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls" /><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>PLAIN</mechanism></mechanisms><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression><auth xmlns="http://jabber.org/features/iq-auth" /></stream:features>
09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst SEND (IMMED): <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls" />
09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst RECV: <proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls" />
09:26:09 DEBUG    sleekxmpp.features.featur Starting TLS
09:26:09 INFO     sleekxmpp.xmlstream.xmlst Negotiating TLS
09:26:09 INFO     sleekxmpp.xmlstream.xmlst SSL field: 3
09:26:09 INFO     sleekxmpp.xmlstream.xmlst Using SSL version: TLS 1.0
09:26:09 ERROR    sleekxmpp.xmlstream.xmlst CERT: Invalid certificate trust chain.
09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst Event triggered: session_end
09:26:09 DEBUG    sleekxmpp.xmlstream.xmlst Event triggered: disconnected
09:26:09 INFO     errbot.core               Disconnect callback, deactivating all the plugins.
09:26:09 DEBUG    sleekxmpp.thirdparty.stat  ==== TRANSITION connected -> disconnected
09:26:09 ERROR    sleekxmpp.xmlstream.xmlst Can not read from closed socket.

Dark Archon

unread,
Aug 29, 2017, 11:48:28 AM8/29/17
to SleekXMPP Discussion
I have even made sure that self.ca_certs is None, and still the same. Any help is appreciated. 

Reply all
Reply to author
Forward
0 new messages