2017-06-23 21:14 GMT-03:00 gregor herrmann <gre...@debian.org>: > On Sun, 05 Feb 2017 10:24:24 +0800, Tommy Wu wrote: > >> After upgrade to 1.05-1, sendxmpp program can't send message to googole >> hangouts. >> >> XML::Stream: SetCallBacks: tag(node) func(CODE(0x5567d6c2aa20)) >> XMPP::Conn: xmppCallbackInit: start >> XMPP::Conn: SetCallBacks: tag(message) func(CODE(0x5567d6c2aaf8)) >> XMPP::Conn: SetCallBacks: tag(presence) func(CODE(0x5567d6b19538)) >> XMPP::Conn: SetCallBacks: tag(iq) func(CODE(0x5567d5bc4b68)) >> XMPP::Conn: SetPresenceCallBacks: type(subscribe) func(CODE(0x5567d6c2a798)) >> XMPP::Conn: SetPresenceCallBacks: type(unsubscribe) >> func(CODE(0x5567d6c2a720)) >> XMPP::Conn: SetPresenceCallBacks: type(unsubscribed) >> func(CODE(0x5567d6c2b068)) >> XMPP::Conn: SetPresenceCallBacks: type(subscribed) func(CODE(0x5567d6c2b1d0)) >> XMPP::Conn: SetDirectXPathCallBacks: >> xpath(/[@xmlns="urn:ietf:params:xml:ns:xmpp-tls"]) func(CODE(0x5567d6bd6a48)) >> XMPP::Conn: SetDirectXPathCallBacks: >> xpath(/[@xmlns="urn:ietf:params:xml:ns:xmpp-sasl"]) >> func(CODE(0x5567d6c2aea0)) >> XMPP::Conn: xmppCallbackInit: stop >> sendxmpp: ssl_verify: 1 >> sendxmpp: tls_ca_path: > > ^^ > >> XMPP::Conn: Connect: host(talk.google.com:5222) namespace(jabber:client) >> XMPP::Conn: Connect: timeout(10) >> XML::Stream: Connect: srv requested >> XML::Stream: Connect: srv query failed >> XML::Stream: Connect: type(tcpip) >> Invalid or unreadable path specified for ssl_ca_path. at >> /usr/share/perl5/XML/Stream.pm line 641. > > ^^ > > Looks like the path to the SSL cert(s) is empty. > I gues either sendxmpp should set it, or XML::Stream should use a > sane default. > > For the latter see /usr/share/perl5/XML/Stream.pm: > 223 $self->{SIDS}->{default}->{ssl_ca_path} = ''; > > Changing this value to '/etc/ssl/certs' might help. > > > I doubt that libnet-xmpp-perl is the problem here; the change between > 1.02 and 1.05 is that it passes a defined ssl_ca_path on to > XML::Stream. > > > Ah, sendxmpp has an option tls-ca-path which is set to an empty > string if not passed on the command line. [0] In that case probably the > empty string somehow propagates down ... > > > Could one of the sendxmpp please try to call it with something like > --tls-ca-path="/etc/ssl/certs" > and see if this helps? > And/or change the above mentioned line in > /usr/share/perl5/XML/Stream.pm? > And/or change the line in sendxmpp mentioned in [0]? > > > If this is successful we still have to think where we should make > changes. > > > Cheers, > gregor > > > [0] > 287 'tls-ca-path' => ($tls_ca_path or ''),
Hi gregor, The both options work fine. Thanks a lot for your help. Please, when uploading, fix Stretch too! Have a nice weekend. Cheers, Eriberto