[Pkg-openssl-devel] Bug#747469: openssl s_client -starttls hangs on XMPP s2s connections

[Benny Baumann]

Source: openssl
Severity: normal
Tags: upstream

When trying to debug connection issues of a XMPP server it is sometimes required
to debug the plain XMPP data stream between the two servers. In order to do this
a handy tool usually is openssl s_client. Unfortunately when debugging XMPP
connections between two servers which uses STARTTLS inside XMPP OpenSSL simply
hangs.

How to reproduce:
1. Choose an arbitrary XMPP server, e.g. xmpp-server.example.org on port 5269
2. Try to connect to this server with openssl s_client:

    openssl s_client -connect xmpp-server.example.org:5269 -starttls xmpp

Expected behaviour:
Either one of the following would be okay:
1.  A connection to the destination server is established
2.  An error message indicating the server's refusal to speak the
    XMPP c2s protocol flavour on the s2s port.

Actual behaviour:
Connection hangs without any indication of why it doesn't continue.

Kind regards,
Benny Baumann

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (900, 'testing'), (800, 'stable'), (750, 'experimental'), (700, 'unstable'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.13-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- no debconf information