[Bug 21228] New: require-encryption seems not to work during registration!

[bugzilla-daemon at freedesktop.org]

http://bugs.freedesktop.org/show_bug.cgi?id=21228

           Summary: require-encryption seems not to work during
                    registration!
           Product: Telepathy
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: critical
          Priority: medium
         Component: telepathy-gabble
        AssignedTo: telepathy-bugs at lists.freedesktop.org
        ReportedBy: will.thompson at collabora.co.uk


Using telepathy-inspector, I registered a test account. I ensured that
require-encryption was true and old-ssl was false. The following debug excerpts
appear to show that Gabble doesn't bother doing <starttls/> before sending the
desired username and password in the clear:

(telepathy-gabble:28074): tp-glib-DEBUG: tp_cm_param_setter_offset: old-ssl =
FALSE
(telepathy-gabble:28074): tp-glib-DEBUG: tp_cm_param_setter_offset:
require-encryption = TRUE
(telepathy-gabble:28074): tp-glib-DEBUG: tp_cm_param_setter_offset: register =
TRUE

SEND:
-----------------------------------
<?xml version='1.0' encoding='UTF-8'?>
-----------------------------------

SEND:
-----------------------------------
<stream:stream version="1.0" xmlns="jabber:client"
xmlns:stream="http://etherx.jabber.org/streams" to="localhost"
id="200857733695">
-----------------------------------

RECV [173]:
-----------------------------------
'<?xml version='1.0'?><stream:stream xmlns='jabber:client'
xmlns:stream='http://etherx.jabber.org/streams' id='3705431228'
from='localhost' version='1.0' xml:lang='en'>'
-----------------------------------

SEND:
-----------------------------------
<iq type="get" id="278545803186"> <query xmlns="jabber:iq:register"></query>
</iq>

-----------------------------------

RECV [271]:
-----------------------------------
'<stream:features><starttls
xmlns='urn:ietf:params:xml:ns:xmpp-tls'/><mechanisms
xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>DIGEST-MD5</mechanism><mechanism>PLAIN</mechanism></mechanisms><register
xmlns='http://jabber.org/features/iq-register'/></stream:features>'
-----------------------------------

RECV [216]:
-----------------------------------
'<iq from='localhost' id='278545803186' type='result'><query
xmlns='jabber:iq:register'><instructions>Choose a username and password to
register with this server</instructions><username/><password/></query></iq>'
-----------------------------------

SEND:
-----------------------------------
<iq type="set" id="333971867831"> <query xmlns="jabber:iq:register">
<username>snthsnthsnthsrnhsth</username>
 <password>snthsnthsnt</password>
</query>
</iq>

-----------------------------------

RECV [182]:
-----------------------------------
'<iq from='localhost' id='333971867831' type='result'><query
xmlns='jabber:iq:register'> <username>snthsnthsnthsrnhsth</username>
 <password>snthsnthsnt</password>
</query></iq>'


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.