iChat SSL help needed!

[drighi]

What if you comment out the cachain completely in c2s.xml for Jabber. Does it work then? And, does SSL over 443 for the web work. I suspect it does, as Apache is apparently very forgiving!

[vogtstev]

Ok. Sorry it took so long. I haven’t been able to work on this for a few days since I was out of the office. Anyway, I ran the terminal command to give me verobse ichat output and this is what I got. Nothing stuck out at me. Maybe someone else sees something. Thanks!

Steve

leo:~ admin$ /Applications/iChat.app/Contents/MacOS/iChat -errorLogLevel 7
211729.325285 ER_AddFilter (0): Adding [admin@127.0.0.1]->[0]
211729.326087 setLocalUserName: admin@127.0.0.1
211729.337387 Default video size is (320 x 240)
211729.356169 H264: (320 x 240) @ 30 fps
211729.356780 H264: (160 x 120) @ 30 fps
211729.357270 H263: (352 x 288) @ 30 fps
211729.357722 H263: (176 x 144) @ 15 fps
211729.358978 ######################################
211729.365404 # SoundDec_Create(81536 –> 393219) #
211729.365939 ######################################
211729.380903 Leaving SoundDec_Create
211729.381994 ### NEW STATE: to: VC_INIT, from: VC_INVALID
211729.382717 ### NEW STATE: to: VC_IDLE, from: VC_INIT
211729.383231 ++++++++++ confStatusMapRemoveAll
211729.383637 ( ) — mapUserIDToSecurityInfo cleared —
211729.384127 NATTraversal created
211729.384929 Bandwidth based on QT prefs = 384
211729.484059 Selected microphone is the null device microphone.
211729.485158 vcCapabilitiesOfCPU returns: 0x00000fff
211729.485691 VCCapAudio
211729.486081 VCCapVideo
211729.486447 VCCapMultiAudio
211729.486808 VCCapMultiVideo
211729.487296 VCCapMultiAudioHost
211729.487718 VCCapMultiVideoHost
211729.488096 VCCapRDClient
211729.488477 VCCapRDServer
211729.488856 VCCapRecordAudio
211729.489230 VCCapRecordVideo
211729.489603 VCCapAuxVideoSend
211729.489979 VCCapAuxVideoRecv
211729.491124 BWD: GotBandwidth: 379084967/245762711 (up/down) @[138.236.128.78:255.255.255.0]
211729.492085 BWD bandwidth: 379084 kbits up, 245762 kbits down.
211729.492751 videoNetworkCapable: 1 — 3 max participants.
211729.493459 audioNetworkCapable: 1 — 9 max participants.
211729.493930 Supports PCMU wideband for audio: 1 / video: 1
211729.494037 SNATMAP Configuration: snatmap.mac.com:5678
211729.495379 vcCapabilitiesOfNetwork returns: 0x00000fff
211729.495929 VCCapAudio
211729.496336 VCCapVideo
211729.496712 VCCapMultiAudio
211729.497091 VCCapMultiVideo
211729.497472 VCCapMultiAudioHost
211729.497854 VCCapMultiVideoHost
211729.498231 VCCapRDClient
211729.498610 VCCapRDServer
211729.498982 VCCapRecordAudio
211729.499363 VCCapRecordVideo
211729.499742 VCCapAuxVideoSend
211729.500115 VCCapAuxVideoRecv
211729.500490 vcCapabilities returns: 0x00000fff
211729.501053 VCCapAudio
211729.501481 VCCapVideo
211729.502077 VCCapMultiAudio
211729.502557 VCCapMultiVideo
211729.502984 VCCapMultiAudioHost
211729.503386 VCCapMultiVideoHost
211729.503766 VCCapRDClient
211729.504253 VCCapRDServer
211729.504638 VCCapRecordAudio
211729.505009 VCCapRecordVideo
211729.505443 VCCapAuxVideoSend
211729.505830 VCCapAuxVideoRecv
211729.510230 Found 0 cameras:
211729.514188 Microphone devices:
211729.515262 Line In
211729.515876 Digital In
211729.516773 Selected microphone is the null device microphone.
211729.517648 vcCapabilitiesOfCPU returns: 0x00000fff
211729.519599 VCCapAudio
211729.529995 VCCapVideo
211729.530062 VCCapMultiAudio
211729.530074 VCCapMultiVideo
211729.530088 VCCapMultiAudioHost
211729.530098 VCCapMultiVideoHost
211729.530109 VCCapRDClient
211729.530119 VCCapRDServer
211729.530130 VCCapRecordAudio
211729.530141 VCCapRecordVideo
211729.530151 VCCapAuxVideoSend
211729.530162 VCCapAuxVideoRecv
211729.531389 BWD: GotBandwidth: 379084967/245762711 (up/down) @[138.236.128.78:255.255.255.0]
211729.531898 BWD bandwidth: 379084 kbits up, 245762 kbits down.
211729.531955 videoNetworkCapable: 1 — 3 max participants.
211729.531968 audioNetworkCapable: 1 — 9 max participants.
211729.531981 Supports PCMU wideband for audio: 1 / video: 1
211729.532528 vcCapabilitiesOfNetwork returns: 0x00000fff
211729.532582 VCCapAudio
211729.532594 VCCapVideo
211729.532605 VCCapMultiAudio
211729.532787 VCCapMultiVideo
211729.532807 VCCapMultiAudioHost
211729.532818 VCCapMultiVideoHost
211729.532828 VCCapRDClient
211729.532839 VCCapRDServer
211729.532849 VCCapRecordAudio
211729.532859 VCCapRecordVideo
211729.532869 VCCapAuxVideoSend
211729.532880 VCCapAuxVideoRecv
211729.532891 vcCapabilities returns: 0x00000fff
211729.532902 VCCapAudio
211729.532912 VCCapVideo
211729.532922 VCCapMultiAudio
211729.532932 VCCapMultiVideo
211729.532943 VCCapMultiAudioHost
211729.532953 VCCapMultiVideoHost
211729.532963 VCCapRDClient
211729.532973 VCCapRDServer
211729.532984 VCCapRecordAudio
211729.532994 VCCapRecordVideo
211729.533004 VCCapAuxVideoSend
211729.533015 VCCapAuxVideoRecv
211729.533485 Found 0 cameras:
211729.533687 Found 0 cameras:
211729.534090 selectCamera: returned 0
211729.537189 Microphone devices:
211729.537937 Line In
211729.538019 Digital In
211729.538653 Selected null device microphone.
211729.549547 Selected microphone is the null device microphone.
211729.564819 Comm reporting flags: 00000112
211729.619680 CommNAT result:
External IP: 138.x.x.x
External Ports: 16403, 16403, 16403
CNAT_BADTEST ……. 0
CNAT_ISFULLCONE …. 1
CNAT_ISPAT ……… 0
CNAT_ISPATHOST ….. 0
CNAT_TRYPRESERVE … 1
CNAT_PATINORDER …. 0
CNAT_BLOCKIP ……. 0
CNAT_BLOCKPORT ….. 0
CNAT_LOOPBACK …… 1
211730.261783 UPnP not found (-3)
211730.262042 UPnP shutdown

[iain]

[quote]
openssl s_client -connect leo.gac.edu:5223
connect: Connection refused
connect:errno=61

After editing the file AND commenting out the CACHAIN line I received:
(part of cert removed for security)

openssl s_client -connect leo.gac.edu:5223
CONNECTED(00000003)
[/quote]

I can confirm that commenting out the CACHAIN line solves this problem on a stock install, using a Thawte wildcard cert installed via Server Admin.

-Iain

[Author]

Posts