agl / xmpp-client

An XMPP client with OTR support
BSD 3-Clause "New" or "Revised" License
365 stars 71 forks source link

Certificate fails to verify against domain in username: tls: handshake did not verify certificate chain #94

Closed ghost closed 9 years ago

ghost commented 9 years ago

I upgraded to Go 1.5 and rebuilt xmpp-client against it and then found I was unable to connect to my previously working XMPP account.

I'm using go version go1.5 darwin/amd64 on OSX 10.10.5 and the output is:

 * (9:42AM) Making connection to ijeeynrc6x2uy5ob.onion:5222 via proxy
 * (9:42AM) Starting TLS handshake
 * (9:42AM)   SSL/TLS version: TLS 1.2
 * (9:42AM)   Cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
 * (9:42AM)   certificate 0: OU=GT70274786/OU=See www.rapidssl.com/resources/cps (c)15/OU=Domain Control Validated - RapidSSL(R)/CN=*.calyxinstitute.org/
 * (9:42AM)   certificate 1: O=GeoTrust Inc./CN=RapidSSL SHA256 CA - G3/
 * (9:42AM)   certificate 2: O=GeoTrust Inc./CN=GeoTrust Global CA/
 * (9:42AM) Certificate fails to verify against domain in username: tls: handshake did not verify certificate chain
 * (9:42AM) Failed to connect to XMPP server: xmpp: failed to match TLS certificate to address after failing to match to username: tls: handshake did not verify certificate chain

I also tried to --create a new account at another server, accessing the non-onion domain and not using Tor at all and received the very same error.

agl commented 9 years ago

Thanks. I think a change in the semantics in Go 1.5 has broken the code for a bit. I hope to be able to look at this soon.

ghost commented 9 years ago

Thanks!