Bug#854210: libnet-xmpp-perl: sendxmpp can't send message to hangouts (work fine for 1.02-5)

[gregor herrmann]

On Sun, 25 Jun 2017 14:52:54 -0300, Eriberto Mota wrote:

> > Another question: you marked this bug as "affects: sendxmpp
> > ejabberd". The former is obvious but why the latter? I don't think
> > that ejabberd uses XML::Stream or Net::XMPP …
> 
> This information was provided by Markus Gschwendt here:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854210#10

Right but I'm reading the message as "It also happens when I use
sendxmpp to send a message to a server running ejabberd [and not only
some google server as in the original bug report]". Cc'ing Markus for
clarification.
 
> When you think that you will can fix the issue?

That depends on the answer to the question where the bug actually is
(and following that who should fix it).

So far we have:
- a bug against libnet-xmpp-perl which is (at least partially) the wrong
  package; the change in Net::XMPP is that it starts to pass on the
  empty path to the ssl certs from sendxmpp to XML::Stream (before
  that it just ignored the path), so even if a change in Net::XMPP
  triggered the issues, it's not doing anything wrong and doesn't
  look like the place to fix anything;
- a probably inflated severity, as sendxmpp appears to work fine if a
  correct --tls-ca-path is passed on the command line (or probably in
  its config file?);
- the idea to make this all easier for users by setting a sane
  default in either sendxmpp or libxml-stream-perl;
- no indication that this affects anything else then sendxmpp
  (if I interpret Markus' message correctly).

Currently I tend to think that setting an empty path for tls-ca-path
is suboptimal behaviour in sendxmpp which should be fixed there.

But I'd welcome other opinions on this point.


Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at/ - Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: Mark Knopfler: Speedway At Nazarath
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: Digital Signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20170625/b870bfbb/attachment-0001.sig>