search

tieto / sipe

A third-party Pidgin plugin for Microsoft Lync/OCS - clone of upstream http://repo.or.cz/w/siplcs.git
GNU General Public License v2.0
129 stars 24 forks source link

Sipe cannot register - server sends TCP reset after client TLS change cipher handshake. #51

Closed gitet closed 6 years ago

gitet commented 8 years ago

Hi all!

I need some help connecting pidgin+sipe (from sipe-collab ppa) to lync server at work. Client is installed on Ubuntu 15.10.

I am able to connect to the lync server with a client running on Ubuntu 14.04 (pidgin 2.10.9-0ubuntu3.2 + pidgin-sipe 1.17.3-1 need to delete/re-add sip server SSL cert manually though, this seems to be a known bug) using SSL/TLS+NTLM, so it should work with the packages installed from the collab PPA...but for some reason it just won't work; I am not even able to register with the server.

Adding the SIP server ssl cert manually (Tools-> Certificates -> Open ...) does not make any difference.

I suspect something is wrong with the way TLS and/or certs are handled by the client, but I might of course be wrong about that.

Any thoughts on how to fix my problem would be much appreciated :-)

Attached: pcap file showing the problem + scrubbed logfile w/list of installed debs.

Best regards, /Espen

change cipher spec - reset.pcapng.zip

pidgin.log.zip

xhaakon commented 8 years ago

Have you tried this? If you're using pidgin-sipe from distribution package or sipe-collab PPA, you can just uncomment the NSS_SSL_CBC_RANDOM_IV line in /etc/default/pidgin-sipe.

gitet commented 8 years ago

Setting NSS_SSL_CBC_RANDOM_IV=0 does not help. Also, the version of pidgin+sipe plugin from ubuntu 14.04 works fine without setting this variable to 0.