[From nobody Sat Mar 21 13:51:06 2026
Received: (at submit) by bugs.debian.org; 9 May 2014 06:05:49 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.2-bugs.debian.org_2005_01_02
 (2011-06-06) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-8.8 required=4.0 tests=BAYES_00, DKIM_SIGNED, FOURLA,
 SPF_HELO_PASS,SPF_PASS,T_DKIM_INVALID,XMAILER_REPORTBUG,X_DEBBUGS_CC
 autolearn=ham version=3.3.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 13; hammy, 151; neutral, 70; spammy,
 0. spammytokens: hammytokens:0.000-+--H*M:reportbug, 0.000-+--H*MI:reportbug, 
 0.000-+--H*x:reportbug, 0.000-+--H*UA:reportbug, 0.000-+--3.13-1-amd64
Return-path: <BenBE@geshi.org>
Received: from box1.sys.ccs-baumann.de ([176.9.26.144])
 by buxtehude.debian.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256)
 (Exim 4.80) (envelope-from <BenBE@geshi.org>) id 1WidwK-0006Iy-My
 for submit@bugs.debian.org; Fri, 09 May 2014 06:05:49 +0000
Received: from localhost (localhost [127.0.0.1])
 by box1.sys.ccs-baumann.de (Postfix) with ESMTP id BB7332472298;
 Fri,  9 May 2014 08:05:43 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=geshi.org; s=r20157;
 t=1399615543; bh=Akoc/ycPrEmHivAkk/6HN8K9pO8JnIUjJ/3QMoR656Q=;
 h=From:To:Subject:Date;
 b=C9tT+iLJi+IG22KW2b+3pSr1WDmC2NuDpV41Zy9fTw84NF6Y22dP+8W4lSKYQOGwb
 mtLUs/vbIMgRD81D0DpKQcC13prSqXysOezqt4e0XGM1mtjcQvlErGAB0+SD5Pnd7t
 ADdmJw69xSS16YSYEGA+tuiZgSVi4IKi6JFzGefQ=
Received: from box1.sys.ccs-baumann.de ([127.0.0.1])
 by localhost (box1.sys.ccs-baumann.de [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id RQwvNH98Wvt1; Fri,  9 May 2014 08:05:43 +0200 (CEST)
Received: by box1.sys.ccs-baumann.de (Postfix, from userid 0)
 id 621A624722A8; Fri,  9 May 2014 08:05:42 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Benny Baumann <BenBE@geshi.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: openssl s_client -starttls hangs on XMPP s2s connections
Message-ID: <20140509060542.22520.28954.reportbug@box1.sys.ccs-baumann.de>
X-Mailer: reportbug 6.5.0
Date: Fri, 09 May 2014 08:05:42 +0200
X-Debbugs-Cc: w+reportbug@chaos.in-kiel.de
Delivered-To: submit@bugs.debian.org

Source: openssl
Severity: normal
Tags: upstream

When trying to debug connection issues of a XMPP server it is sometimes required
to debug the plain XMPP data stream between the two servers. In order to do this
a handy tool usually is openssl s_client. Unfortunately when debugging XMPP
connections between two servers which uses STARTTLS inside XMPP OpenSSL simply
hangs.

How to reproduce:
1. Choose an arbitrary XMPP server, e.g. xmpp-server.example.org on port 5269
2. Try to connect to this server with openssl s_client:

    openssl s_client -connect xmpp-server.example.org:5269 -starttls xmpp

Expected behaviour:
Either one of the following would be okay:
1.  A connection to the destination server is established
2.  An error message indicating the server's refusal to speak the
    XMPP c2s protocol flavour on the s2s port.

Actual behaviour:
Connection hangs without any indication of why it doesn't continue.

Kind regards,
Benny Baumann

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (900, 'testing'), (800, 'stable'), (750, 'experimental'), (700, 'unstable'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.13-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- no debconf information
]