Bug 1221262

Summary:	Xchat on RHEL 7.0 CSB uses SSLv3 to connect to server
Product:	Red Hat Enterprise Linux 7	Reporter:	Ann Marie Rubin <arubin>
Component:	xchat	Assignee:	Debarshi Ray <debarshir>
Status:	CLOSED DUPLICATE	QA Contact:	Desktop QE <desktop-qa-list>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	7.0
Target Milestone:	rc
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-05-13 17:04:48 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ann Marie Rubin 2015-05-13 15:00:57 UTC

Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 2 Ann Marie Rubin 2015-05-13 15:08:21 UTC

<t8m> it could be the same problem or not, this just signalls that the ssl server does not like the client
<arubin> how do I find out what it doesn't like and what I need to change?
<t8m> could you give me the address of the server?
<arubin> irc.linux.hp.com
<arubin> port = "994"
<arubin> I wonder if it has to do with poodle
<arubin> https://bugs.launchpad.net/ubuntu/+source/xchat-gnome/+bug/1381484
<t8m> hmm I am able to connect with Fedora
<t8m> Fedora 21
<t8m> it is possible that the RHEL 7 CSB xchat is broken
<arubin> can you connect to the hp irc channel
<t8m> that it uses SSL3 only
<arubin> it was also broken on RHEL 6
<arubin> that's why I upgraded to RHEL 7
<t8m> I can connect there fine
<arubin> I wonder if HP server disabled sslv3 because of poodle and xchat only uses sslv3 to connect
<t8m> yes
<t8m> that's most probable
<arubin> are you connecting with sslv3?
<t8m> Probably not
<t8m> I would have to look at the network packets
<arubin> can I change the way I connect to use TLS?
<arubin> configure it?
<t8m> I am afraid it is hardcoded

Comment 3 Ann Marie Rubin 2015-05-13 15:23:06 UTC

To reproduce:

  {
     address = "irc.linux.hp.com";
     chatnet = "hp";
     port = "994";
     use_ssl = "ON";
     autoconnect = "yes";
     nick = "arubin";
   }

Comment 4 Ann Marie Rubin 2015-05-13 15:25:23 UTC

tried disabling ssl in the xchat client connection:

 Cycling to next server in ChatNet...
* Disconnected ().
* Looking up irc.linux.hp.com
* Connecting to people.linux.hp.com (15.250.148.100) port 994...
* Connected. Now logging in...
* Disconnected (Connection reset by peer).

There is no way to change xchat to use TLS

Comment 5 Debarshi Ray 2015-05-13 17:04:48 UTC


*** This bug has been marked as a duplicate of bug 1198317 ***