[Gajim-devel] Re : Re : Re : Re : Re : PKCS12 with password

[Saleem Edah-Tally]

>Perfect, it's commited to trunk.

>Thanks for the tests!
>You can use it by doing:


Unfortunately, connecting with an unencrypted p12 container still constantly 
fails with the following error :

*********************************************************************************************

06:47:51 (W) gajim.c.x.tls_nb Unknown error while loading certificate from file 
/home/user/xmpp_lab_test.p12
06:47:51 (E) gajim.c.x.tls_nb Error while TLS handshake: 
Traceback (most recent call last):
  File "/home/user/tmp/gajim-dev/src/common/xmpp/tls_nb.py", line 423, in 
_startSSL_pyOpenSSL
    tcpsock._sslObj.do_handshake()
SysCallError: (-1, 'Unexpected EOF')
*********************************************************************************************


It seems that conn.client_cert_passphrase in tls_nb.py still defaults to None. 
Connection succeeds with :
*********************************************************************************************

if (conn.client_cert_passphrase == None):
          conn.client_cert_passphrase = ''
p12 = OpenSSL.crypto.load_pkcs12(open(conn.client_cert).read(), 
conn.client_cert_passphrase)
*********************************************************************************************