Test Results Report - C2S: TLS - Client Cert: Two-way TLS

Passed Tests
tigase.tests.server.TestTwoWayTLS
testConnectionWithCertificate	20.542s	2021-05-26 22:56:29 \| 2021-05-26 22:56:29 \| null / [TestClass name=class tigase.tests.server.TestTwoWayTLS] 2021-05-26 22:56:29 \| ------------------------------------ 2021-05-26 22:56:29 \| == test connection with OK certificate 2021-05-26 22:56:29 \| Private key: SunRsaSign RSA private CRT key, 1024 bits params: null modulus: 152761233143497582116717054095409374921484861881219838581049774918827920370633380183327557894608259805888440781489432167999315517717065393898030606251674341936883646661541606206019244807482197161925251151354063576657073657664807420344658857040469040824225256741751244332063539034528087632994997564807553381137 private exponent: 98495180855267006880449148387256336827780708968259540398261124082121436794199980362645365005944224275716342732542189079313656049508709817119416227440541220185215155267440596336780035042728733097642326630147794535561752716218858405844442745910716925045907430666325183330107989176483374996594251719256717909761 [ [ Version: V3 Subject: CN=Client, O=Internet Widgits Pty Ltd, ST=Some-State, C=US Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11 Key: Sun RSA public key, 1024 bits params: null modulus: 152761233143497582116717054095409374921484861881219838581049774918827920370633380183327557894608259805888440781489432167999315517717065393898030606251674341936883646661541606206019244807482197161925251151354063576657073657664807420344658857040469040824225256741751244332063539034528087632994997564807553381137 public exponent: 65537 Validity: [From: Mon Apr 20 04:19:08 PDT 2015, To: Fri Sep 05 04:19:08 PDT 2042] Issuer: CN=ROOT, O=Internet Widgits Pty Ltd, ST=Some-State, C=US SerialNumber: [ 96f20c6d 2893e805] Certificate Extensions: 4 [1]: ObjectId: 2.16.840.1.113730.1.13 Criticality=false Extension unknown: DER encoded OCTET string = 0000: 04 1F 16 1D 4F 70 65 6E 53 53 4C 20 47 65 6E 65 ....OpenSSL Gene 0010: 72 61 74 65 64 20 43 65 72 74 69 66 69 63 61 74 rated Certificat 0020: 65 e [2]: ObjectId: 2.5.29.35 Criticality=false AuthorityKeyIdentifier [ KeyIdentifier [ 0000: 62 A9 11 75 F0 62 1D B8 CA F9 F3 7E A2 65 5A AB b..u.b.......eZ. 0010: C9 97 49 0D ..I. ] ] [3]: ObjectId: 2.5.29.19 Criticality=false BasicConstraints:[ CA:false PathLen: undefined ] [4]: ObjectId: 2.5.29.14 Criticality=false SubjectKeyIdentifier [ KeyIdentifier [ 0000: C1 FA 2F 1F 5C 62 EC 83 B0 7B 91 A7 A7 46 BB 62 ../.\b.......F.b 0010: 5D 23 3F D0 ]#?. ] ] ] Algorithm: [SHA256withRSA] Signature: 0000: 61 8E 44 18 EC 3B A3 3E DF 8A DF 64 6F 79 FD C2 a.D..;.>...doy.. 0010: 66 4F AC 58 4A 75 FD 08 12 F8 B4 69 13 59 75 2A fO.XJu.....i.Yu* 0020: FD 64 F8 35 CC 40 64 D9 E3 F4 12 C1 68 A4 04 4E .d.5.@d.....h..N 0030: 11 CB B2 ED 81 30 AA 5E C9 F9 C7 57 0A 1E B6 2C .....0.^...W..., 0040: F5 28 95 E9 D7 FD 95 36 A5 10 D1 0E 85 08 55 A0 .(.....6......U. 0050: C5 61 B9 B1 56 3A 81 D8 F5 95 E8 04 AB DB EE C3 .a..V:.......... 0060: 2F B3 FC 70 00 F9 4F DD D5 92 2E 25 0C 08 C2 56 /..p..O....%...V 0070: 94 9B CA 9F BA 64 4A 1F 11 91 C4 21 C2 75 D3 01 .....dJ....!.u.. 0080: E3 91 27 7C F1 7B E0 8B F9 1C ED 06 7D 6F 02 FC ..'..........o.. 0090: C4 CD 63 98 64 20 F3 A9 18 51 F8 41 57 B0 AE C9 ..c.d ...Q.AW... 00A0: A4 C7 C3 AD 3E 2C CF 30 59 E9 22 CD A3 6A F7 49 ....>,.0Y."..j.I 00B0: BA 42 7F D7 D6 4B D0 BE AB A5 7C 46 F0 11 C1 D7 .B...K.....F.... 00C0: 89 C8 2E F4 83 9B 90 AD 49 1E B1 A1 DD F6 C7 79 ........I......y 00D0: 89 7F 1E 3F 2E 18 33 D8 90 71 8C 44 86 CF 66 B5 ...?..3..q.D..f. 00E0: D7 89 60 1B 48 C7 CF 9E A1 AC 0C 3D 6B CA 7A F8 ..`.H......=k.z. 00F0: AD 92 55 9C 4E F7 58 A9 C8 16 4D 48 A3 46 8F D2 ..U.N.X...MH.F.. ] 2021-05-26 22:56:29 \| tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@490f2eff 2021-05-26 22:56:29 \| StateChangedEvent{oldState=null, newState=connecting} 2021-05-26 22:56:29 \| tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@47c8c9ae 2021-05-26 22:56:29 \| StateChangedEvent{oldState=connecting, newState=connected} 2021-05-26 22:56:29 \| tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@43f7458f 2021-05-26 22:56:29 \| >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-05-26 22:56:29 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-05-26 22:56:29 \| StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>} 2021-05-26 22:56:29 \| StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>] 2021-05-26 22:56:29 \| << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-05-26 22:56:29 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-05-26 22:56:29 \| StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>} 2021-05-26 22:56:29 \| tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@6f5c395 2021-05-26 22:56:29 \| tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@363d6d62 2021-05-26 22:56:29 \| >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-05-26 22:56:29 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-05-26 22:56:29 \| StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>} 2021-05-26 22:56:29 \| StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>] 2021-05-26 22:56:29 \| << <iq to="a.localhost" id="Qq5XiZhFyo4k4CHKukPSLIV" type="get"><query xmlns="jabber:iq:register"/></iq> 2021-05-26 22:56:29 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost >> <iq to="a.localhost" id="Qq5XiZhFyo4k4CHKukPSLIV" type="get"><query xmlns="jabber:iq:register"/></iq> 2021-05-26 22:56:29 \| StanzaSendingEvent{stanza=<iq to="a.localhost" id="Qq5XiZhFyo4k4CHKukPSLIV" type="get"><query xmlns="jabber:iq:register"/></iq>} 2021-05-26 22:56:29 \| >> <iq type="result" id="Qq5XiZhFyo4k4CHKukPSLIV" from="a.localhost" xmlns="jabber:client"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x type="form" xmlns="jabber:x:data"><title>Account Registration</title><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field var="FORM_TYPE" type="hidden"><value>jabber:iq:register</value></field><field var="username" type="text-single" label="Username"><required/><value/></field><field var="password" type="text-private" label="Password"><required/><value/></field><field var="email" type="text-single" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq> 2021-05-26 22:56:29 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost << <iq type="result" id="Qq5XiZhFyo4k4CHKukPSLIV" from="a.localhost" xmlns="jabber:client"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x type="form" xmlns="jabber:x:data"><title>Account Registration</title><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field var="FORM_TYPE" type="hidden"><value>jabber:iq:register</value></field><field var="username" type="text-single" label="Username"><required/><value/></field><field var="password" type="text-private" label="Password"><required/><value/></field><field var="email" type="text-single" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq> 2021-05-26 22:56:29 \| StanzaReceivedEvent{stanza=<iq type="result" id="Qq5XiZhFyo4k4CHKukPSLIV" from="a.localhost" xmlns="jabber:client"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x type="form" xmlns="jabber:x:data"><title>Account Registration</title><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field var="FORM_TYPE" type="hidden"><value>jabber:iq:register</value></field><field var="username" type="text-single" label="Username"><required/><value/></field><field var="password" type="text-private" label="Password"><required/><value/></field><field var="email" type="text-single" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq>} 2021-05-26 22:56:29 \| tigase.jaxmpp.core.client.xmpp.modules.registration.InBandRegistrationModule$ReceivedRequestedFieldsHandler$ReceivedRequestedFieldsEvent@4e9bb7f7 2021-05-26 22:56:29 \| << <iq to="a.localhost" id="WufugIQaNWS6nYX6HRX8l7v" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_uyibzz0124</username><password>two-way-tsl-user-OK_uyibzz0124</password><email>c229c9aa-eee1-4cf1-aca7-e6aafb0c75e7@localhost</email></query></iq> 2021-05-26 22:56:29 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost >> <iq to="a.localhost" id="WufugIQaNWS6nYX6HRX8l7v" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_uyibzz0124</username><password>two-way-tsl-user-OK_uyibzz0124</password><email>c229c9aa-eee1-4cf1-aca7-e6aafb0c75e7@localhost</email></query></iq> 2021-05-26 22:56:29 \| StanzaSendingEvent{stanza=<iq to="a.localhost" id="WufugIQaNWS6nYX6HRX8l7v" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_uyibzz0124</username><password>two-way-tsl-user-OK_uyibzz0124</password><email>c229c9aa-eee1-4cf1-aca7-e6aafb0c75e7@localhost</email></query></iq>} 2021-05-26 22:56:30 \| >> <iq type="result" id="WufugIQaNWS6nYX6HRX8l7v" from="a.localhost" xmlns="jabber:client"/> 2021-05-26 22:56:30 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost << <iq type="result" id="WufugIQaNWS6nYX6HRX8l7v" from="a.localhost" xmlns="jabber:client"/> 2021-05-26 22:56:30 \| StanzaReceivedEvent{stanza=<iq type="result" id="WufugIQaNWS6nYX6HRX8l7v" from="a.localhost" xmlns="jabber:client"/>} 2021-05-26 22:56:49 \| StateChangedEvent{oldState=connected, newState=disconnected} 2021-05-26 22:56:49 \| tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@66da3cda 2021-05-26 22:56:49 \| tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@3bd10b1e 2021-05-26 22:56:49 \| tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@46284f01 2021-05-26 22:56:49 \| Disconnected during registration! 2021-05-26 22:56:49 \| [Mutex] notify: [registration] 2021-05-26 22:56:49 \| tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@559f7c3c 2021-05-26 22:56:49 \| [Mutex] received everything. 2021-05-26 22:56:49 \| [Mutex] isItemNotified: registrationSuccess :: true
testConnectionWithWrongCertificate	0.430s	2021-05-26 22:56:49 \| 2021-05-26 22:56:49 \| null / [TestClass name=class tigase.tests.server.TestTwoWayTLS] 2021-05-26 22:56:49 \| ------------------------------------ 2021-05-26 22:56:49 \| == testing connection with WRONG certificate 2021-05-26 22:56:49 \| [ [ Version: V1 Subject: CN=domain, CN=.domain, EMAILADDRESS=alice@coffeebean.local, OU=org, O=org, L=tr, ST=kp, C=PL Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5 Key: Sun RSA public key, 1024 bits params: null modulus: 96762429089934322329828915499555683320407756434936200604566999150070033624920376136973883635145874294104776979275520155811194128564617104207775233089701375385180272864482873680466681601538588184329422594177990654869022932116796677362703391293843730727235088396426584374047778857062014195601109377750246997207 public exponent: 65537 Validity: [From: Wed May 26 22:56:49 PDT 2021, To: Thu May 26 22:56:49 PDT 2022] Issuer: CN=domain, CN=.domain, EMAILADDRESS=alice@coffeebean.local, OU=org, O=org, L=tr, ST=kp, C=PL SerialNumber: [ 60af34a1] ] Algorithm: [SHA1withRSA] Signature: 0000: 6E F7 86 C4 1B D2 CB F3 AA 82 30 B9 1E E7 47 22 n.........0...G" 0010: 0B F0 E6 0A 16 A8 93 BE 8F E1 8B 5F 40 B8 0B 33 ..........._@..3 0020: 37 D3 BF 89 82 7A 3D C8 D2 B2 8B AD 03 15 2A 62 7....z=.......*b 0030: 2F EF 41 58 D4 E0 BB 3F 70 CA D0 81 92 47 F4 ED /.AX...?p....G.. 0040: 27 CD C8 C5 B4 83 8C F7 A3 C9 26 FF CD B5 71 74 '.........&...qt 0050: 2D 8C DB CE CB EE B2 4E FE 2D AF AA 5E 0E 00 11 -......N.-..^... 0060: DA 61 49 5F 9E AB 7E FA 59 1C EE 5B DE 18 A5 52 .aI_....Y..[...R 0070: 33 61 97 BD 46 17 74 82 B9 57 54 6A 47 5D 36 32 3a..F.t..WTjG]62 ] 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@63380374 2021-05-26 22:56:50 \| StateChangedEvent{oldState=null, newState=connecting} 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@6dfff163 2021-05-26 22:56:50 \| StateChangedEvent{oldState=connecting, newState=connected} 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@69c06804 2021-05-26 22:56:50 \| >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-05-26 22:56:50 \| StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>] 2021-05-26 22:56:50 \| two-way-tsl-user-WRONG :: two-way-tsl-user-WRONG_mnod0x0125@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-05-26 22:56:50 \| StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>} 2021-05-26 22:56:50 \| << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-05-26 22:56:50 \| two-way-tsl-user-WRONG :: two-way-tsl-user-WRONG_mnod0x0125@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-05-26 22:56:50 \| StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>} 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@2cc2fb58 2021-05-26 22:56:50 \| ErrorEvent{condition=null, caught=tigase.jaxmpp.core.client.exceptions.JaxmppException: java.net.SocketException: Connection reset by peer (Write failed), sessionObject=AbstractSessionObject{properties={CONNECTOR#ENCRYPTED_KEY=Entry{scope=stream, value=true}, CONNECTOR#DISABLEKEEPALIVE=Entry{scope=stream, value=true}, StreamFeaturesModule#STREAMS_FEATURES_LIST=Entry{scope=session, value=[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]}, STREAMS_MANAGER_KEY=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.stream.XmppStreamsManager@f426e17}, userBareJid=Entry{scope=user, value=two-way-tsl-user-WRONG_mnod0x0125@a.localhost}, CONNECTOR#STAGE_KEY=Entry{scope=stream, value=connected}, HOSTNAME_VERIFIER_DISABLED_KEY=Entry{scope=user, value=true}, StreamFeaturesModule#PIPELINING_ACTIVE=Entry{scope=session, value=false}, TLS_DISABLED=Entry{scope=user, value=false}, password=Entry{scope=user, value=two-way-tsl-user-WRONG_mnod0x0125}, StreamFeaturesModule#EMBEDDED_STREAMS_COUNTER=Entry{scope=session, value=1}, IN_BAND_REGISTRATION_MODE_KEY=Entry{scope=session, value=true}, CONNECTOR#CONNECTOR_STAGE_TIMESTAMP_KEY=Entry{scope=stream, value=Wed May 26 22:56:50 PDT 2021}, TRUST_MANAGERS_KEY=Entry{scope=user, value=[Ljavax.net.ssl.X509TrustManager;@1d24f275}, KEY_MANAGERS_KEY=Entry{scope=session, value=[Ljavax.net.ssl.KeyManager;@774e399d}, COMPRESSION_DISABLED=Entry{scope=user, value=true}, BOSH#SEE_OTHER_HOST_KEY=Entry{scope=user, value=false}, RosterModule#ROSTER_STORE=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.modules.roster.DefaultRosterStore@4ced0417}, PresenceModule#PRESENCE_STORE=Entry{scope=user, value=tigase.jaxmpp.j2se.J2SEPresenceStore@50c3e94b}, ResponseManager#RESPONSE_MANAGER=Entry{scope=user, value=tigase.jaxmpp.j2se.ThreadSafeResponseManager@6a4e0e7c}, DEFAULT_XMPP_STREAM_KEY=Entry{scope=session, value=DefaultXMPPStream}, domainName=Entry{scope=user, value=a.localhost}, LOG_PREFIX=Entry{scope=user, value=two-way-tsl-user-WRONG}, socket#ServerHost=Entry{scope=user, value=localhost}}}} 2021-05-26 22:56:50 \| StateChangedEvent{oldState=connected, newState=disconnected} 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@6c4a5079 2021-05-26 22:56:50 \| Disconnected during registration! 2021-05-26 22:56:50 \| [Mutex] notify: [registration] 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@48a33c5b 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@7651db5 2021-05-26 22:56:50 \| [Mutex] received everything. 2021-05-26 22:56:50 \| [Mutex] isItemNotified: registrationSuccess :: false
testConnectionWithoutCertificate	0.092s	2021-05-26 22:56:50 \| 2021-05-26 22:56:50 \| null / [TestClass name=class tigase.tests.server.TestTwoWayTLS] 2021-05-26 22:56:50 \| ------------------------------------ 2021-05-26 22:56:50 \| == testing connection WITHOUT certificate 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@7eb0d71a 2021-05-26 22:56:50 \| StateChangedEvent{oldState=null, newState=connecting} 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@707736bc 2021-05-26 22:56:50 \| StateChangedEvent{oldState=connecting, newState=connected} 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@7448bc6a 2021-05-26 22:56:50 \| >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-05-26 22:56:50 \| two-way-tsl-user-WITHOUT :: two-way-tsl-user-WITHOUT_sgmske0126@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-05-26 22:56:50 \| StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>} 2021-05-26 22:56:50 \| StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>] 2021-05-26 22:56:50 \| << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-05-26 22:56:50 \| two-way-tsl-user-WITHOUT :: two-way-tsl-user-WITHOUT_sgmske0126@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-05-26 22:56:50 \| StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>} 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@314a3c87 2021-05-26 22:56:50 \| ErrorEvent{condition=null, caught=tigase.jaxmpp.core.client.exceptions.JaxmppException: java.net.SocketException: Connection reset by peer (Write failed), sessionObject=AbstractSessionObject{properties={CONNECTOR#ENCRYPTED_KEY=Entry{scope=stream, value=true}, TRUST_MANAGERS_KEY=Entry{scope=user, value=[Ljavax.net.ssl.X509TrustManager;@1d24f275}, CONNECTOR#DISABLEKEEPALIVE=Entry{scope=stream, value=false}, StreamFeaturesModule#STREAMS_FEATURES_LIST=Entry{scope=session, value=[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]}, STREAMS_MANAGER_KEY=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.stream.XmppStreamsManager@493a35b3}, COMPRESSION_DISABLED=Entry{scope=user, value=true}, BOSH#SEE_OTHER_HOST_KEY=Entry{scope=user, value=false}, userBareJid=Entry{scope=user, value=two-way-tsl-user-WITHOUT_sgmske0126@a.localhost}, CONNECTOR#STAGE_KEY=Entry{scope=stream, value=disconnected}, HOSTNAME_VERIFIER_DISABLED_KEY=Entry{scope=user, value=true}, RosterModule#ROSTER_STORE=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.modules.roster.DefaultRosterStore@3128fe}, ResponseManager#RESPONSE_MANAGER=Entry{scope=user, value=tigase.jaxmpp.j2se.ThreadSafeResponseManager@31ab7f7e}, PresenceModule#PRESENCE_STORE=Entry{scope=user, value=tigase.jaxmpp.j2se.J2SEPresenceStore@5165c3c8}, StreamFeaturesModule#PIPELINING_ACTIVE=Entry{scope=session, value=false}, TLS_DISABLED=Entry{scope=user, value=false}, password=Entry{scope=user, value=two-way-tsl-user-WITHOUT_sgmske0126}, DEFAULT_XMPP_STREAM_KEY=Entry{scope=session, value=DefaultXMPPStream}, domainName=Entry{scope=user, value=a.localhost}, StreamFeaturesModule#EMBEDDED_STREAMS_COUNTER=Entry{scope=session, value=1}, LOG_PREFIX=Entry{scope=user, value=two-way-tsl-user-WITHOUT}, socket#ServerHost=Entry{scope=user, value=localhost}, IN_BAND_REGISTRATION_MODE_KEY=Entry{scope=session, value=true}, CONNECTOR#CONNECTOR_STAGE_TIMESTAMP_KEY=Entry{scope=stream, value=Wed May 26 22:56:50 PDT 2021}}}} 2021-05-26 22:56:50 \| StateChangedEvent{oldState=connected, newState=disconnected} 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@496ae3fa 2021-05-26 22:56:50 \| Disconnected during registration! 2021-05-26 22:56:50 \| [Mutex] notify: [registration] 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@401544f1 2021-05-26 22:56:50 \| tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@2aaf9302 2021-05-26 22:56:50 \| [Mutex] received everything. 2021-05-26 22:56:50 \| [Mutex] isItemNotified: registrationSuccess :: false

tigase.tests.server.TestTwoWayTLS

testConnectionWithCertificate

20.542s

2021-05-26 22:56:29 |

2021-05-26 22:56:29 | null / [TestClass name=class tigase.tests.server.TestTwoWayTLS]

2021-05-26 22:56:29 | ------------------------------------

2021-05-26 22:56:29 | == test connection with OK certificate

2021-05-26 22:56:29 | Private key: SunRsaSign RSA private CRT key, 1024 bits
params: null
modulus: 152761233143497582116717054095409374921484861881219838581049774918827920370633380183327557894608259805888440781489432167999315517717065393898030606251674341936883646661541606206019244807482197161925251151354063576657073657664807420344658857040469040824225256741751244332063539034528087632994997564807553381137
private exponent: 98495180855267006880449148387256336827780708968259540398261124082121436794199980362645365005944224275716342732542189079313656049508709817119416227440541220185215155267440596336780035042728733097642326630147794535561752716218858405844442745910716925045907430666325183330107989176483374996594251719256717909761
[
[
Version: V3
Subject: CN=Client, O=Internet Widgits Pty Ltd, ST=Some-State, C=US
Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11

Key: Sun RSA public key, 1024 bits
params: null
modulus: 152761233143497582116717054095409374921484861881219838581049774918827920370633380183327557894608259805888440781489432167999315517717065393898030606251674341936883646661541606206019244807482197161925251151354063576657073657664807420344658857040469040824225256741751244332063539034528087632994997564807553381137
public exponent: 65537
Validity: [From: Mon Apr 20 04:19:08 PDT 2015,
 To: Fri Sep 05 04:19:08 PDT 2042]
Issuer: CN=ROOT, O=Internet Widgits Pty Ltd, ST=Some-State, C=US
SerialNumber: [ 96f20c6d 2893e805]

Certificate Extensions: 4
[1]: ObjectId: 2.16.840.1.113730.1.13 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 1F 16 1D 4F 70 65 6E 53 53 4C 20 47 65 6E 65 ....OpenSSL Gene
0010: 72 61 74 65 64 20 43 65 72 74 69 66 69 63 61 74 rated Certificat
0020: 65 e

[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 62 A9 11 75 F0 62 1D B8 CA F9 F3 7E A2 65 5A AB b..u.b.......eZ.
0010: C9 97 49 0D ..I.
]
]

[3]: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:false
PathLen: undefined
]

[4]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: C1 FA 2F 1F 5C 62 EC 83 B0 7B 91 A7 A7 46 BB 62 ../.\b.......F.b
0010: 5D 23 3F D0 ]#?.
]
]

]
Algorithm: [SHA256withRSA]
Signature:
0000: 61 8E 44 18 EC 3B A3 3E DF 8A DF 64 6F 79 FD C2 a.D..;.>...doy..
0010: 66 4F AC 58 4A 75 FD 08 12 F8 B4 69 13 59 75 2A fO.XJu.....i.Yu*
0020: FD 64 F8 35 CC 40 64 D9 E3 F4 12 C1 68 A4 04 4E .d.5.@d.....h..N
0030: 11 CB B2 ED 81 30 AA 5E C9 F9 C7 57 0A 1E B6 2C .....0.^...W...,
0040: F5 28 95 E9 D7 FD 95 36 A5 10 D1 0E 85 08 55 A0 .(.....6......U.
0050: C5 61 B9 B1 56 3A 81 D8 F5 95 E8 04 AB DB EE C3 .a..V:..........
0060: 2F B3 FC 70 00 F9 4F DD D5 92 2E 25 0C 08 C2 56 /..p..O....%...V
0070: 94 9B CA 9F BA 64 4A 1F 11 91 C4 21 C2 75 D3 01 .....dJ....!.u..
0080: E3 91 27 7C F1 7B E0 8B F9 1C ED 06 7D 6F 02 FC ..'..........o..
0090: C4 CD 63 98 64 20 F3 A9 18 51 F8 41 57 B0 AE C9 ..c.d ...Q.AW...
00A0: A4 C7 C3 AD 3E 2C CF 30 59 E9 22 CD A3 6A F7 49 ....>,.0Y."..j.I
00B0: BA 42 7F D7 D6 4B D0 BE AB A5 7C 46 F0 11 C1 D7 .B...K.....F....
00C0: 89 C8 2E F4 83 9B 90 AD 49 1E B1 A1 DD F6 C7 79 ........I......y
00D0: 89 7F 1E 3F 2E 18 33 D8 90 71 8C 44 86 CF 66 B5 ...?..3..q.D..f.
00E0: D7 89 60 1B 48 C7 CF 9E A1 AC 0C 3D 6B CA 7A F8 ..`.H......=k.z.
00F0: AD 92 55 9C 4E F7 58 A9 C8 16 4D 48 A3 46 8F D2 ..U.N.X...MH.F..

]

2021-05-26 22:56:29 | tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@490f2eff

2021-05-26 22:56:29 | StateChangedEvent{oldState=null, newState=connecting}

2021-05-26 22:56:29 | tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@47c8c9ae

2021-05-26 22:56:29 | StateChangedEvent{oldState=connecting, newState=connected}

2021-05-26 22:56:29 | tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@43f7458f

2021-05-26 22:56:29 | >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-05-26 22:56:29 | two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-05-26 22:56:29 | StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>}

2021-05-26 22:56:29 | StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]

2021-05-26 22:56:29 | << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-05-26 22:56:29 | two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-05-26 22:56:29 | StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>}

2021-05-26 22:56:29 | tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@6f5c395

2021-05-26 22:56:29 | tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@363d6d62

2021-05-26 22:56:29 | >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-05-26 22:56:29 | two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-05-26 22:56:29 | StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>}

2021-05-26 22:56:29 | StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]

2021-05-26 22:56:29 | << <iq to="a.localhost" id="Qq5XiZhFyo4k4CHKukPSLIV" type="get"><query xmlns="jabber:iq:register"/></iq>

2021-05-26 22:56:29 | two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost >> <iq to="a.localhost" id="Qq5XiZhFyo4k4CHKukPSLIV" type="get"><query xmlns="jabber:iq:register"/></iq>

2021-05-26 22:56:29 | StanzaSendingEvent{stanza=<iq to="a.localhost" id="Qq5XiZhFyo4k4CHKukPSLIV" type="get"><query xmlns="jabber:iq:register"/></iq>}

2021-05-26 22:56:29 | >> <iq type="result" id="Qq5XiZhFyo4k4CHKukPSLIV" from="a.localhost" xmlns="jabber:client"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x type="form" xmlns="jabber:x:data"><title>Account Registration</title><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field var="FORM_TYPE" type="hidden"><value>jabber:iq:register</value></field><field var="username" type="text-single" label="Username"><required/><value/></field><field var="password" type="text-private" label="Password"><required/><value/></field><field var="email" type="text-single" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq>

2021-05-26 22:56:29 | two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost << <iq type="result" id="Qq5XiZhFyo4k4CHKukPSLIV" from="a.localhost" xmlns="jabber:client"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x type="form" xmlns="jabber:x:data"><title>Account Registration</title><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field var="FORM_TYPE" type="hidden"><value>jabber:iq:register</value></field><field var="username" type="text-single" label="Username"><required/><value/></field><field var="password" type="text-private" label="Password"><required/><value/></field><field var="email" type="text-single" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq>

2021-05-26 22:56:29 | StanzaReceivedEvent{stanza=<iq type="result" id="Qq5XiZhFyo4k4CHKukPSLIV" from="a.localhost" xmlns="jabber:client"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x type="form" xmlns="jabber:x:data"><title>Account Registration</title><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field var="FORM_TYPE" type="hidden"><value>jabber:iq:register</value></field><field var="username" type="text-single" label="Username"><required/><value/></field><field var="password" type="text-private" label="Password"><required/><value/></field><field var="email" type="text-single" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq>}

2021-05-26 22:56:29 | tigase.jaxmpp.core.client.xmpp.modules.registration.InBandRegistrationModule$ReceivedRequestedFieldsHandler$ReceivedRequestedFieldsEvent@4e9bb7f7

2021-05-26 22:56:29 | << <iq to="a.localhost" id="WufugIQaNWS6nYX6HRX8l7v" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_uyibzz0124</username><password>two-way-tsl-user-OK_uyibzz0124</password><email>c229c9aa-eee1-4cf1-aca7-e6aafb0c75e7@localhost</email></query></iq>

2021-05-26 22:56:29 | two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost >> <iq to="a.localhost" id="WufugIQaNWS6nYX6HRX8l7v" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_uyibzz0124</username><password>two-way-tsl-user-OK_uyibzz0124</password><email>c229c9aa-eee1-4cf1-aca7-e6aafb0c75e7@localhost</email></query></iq>

2021-05-26 22:56:29 | StanzaSendingEvent{stanza=<iq to="a.localhost" id="WufugIQaNWS6nYX6HRX8l7v" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_uyibzz0124</username><password>two-way-tsl-user-OK_uyibzz0124</password><email>c229c9aa-eee1-4cf1-aca7-e6aafb0c75e7@localhost</email></query></iq>}

2021-05-26 22:56:30 | >> <iq type="result" id="WufugIQaNWS6nYX6HRX8l7v" from="a.localhost" xmlns="jabber:client"/>

2021-05-26 22:56:30 | two-way-tsl-user-OK :: two-way-tsl-user-OK_uyibzz0124@a.localhost << <iq type="result" id="WufugIQaNWS6nYX6HRX8l7v" from="a.localhost" xmlns="jabber:client"/>

2021-05-26 22:56:30 | StanzaReceivedEvent{stanza=<iq type="result" id="WufugIQaNWS6nYX6HRX8l7v" from="a.localhost" xmlns="jabber:client"/>}

2021-05-26 22:56:49 | StateChangedEvent{oldState=connected, newState=disconnected}

2021-05-26 22:56:49 | tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@66da3cda

2021-05-26 22:56:49 | tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@3bd10b1e

2021-05-26 22:56:49 | tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@46284f01

2021-05-26 22:56:49 | Disconnected during registration!

2021-05-26 22:56:49 | [Mutex] notify: [registration]

2021-05-26 22:56:49 | tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@559f7c3c

2021-05-26 22:56:49 | [Mutex] received everything.

2021-05-26 22:56:49 | [Mutex] isItemNotified: registrationSuccess :: true

testConnectionWithWrongCertificate

0.430s

2021-05-26 22:56:49 |

2021-05-26 22:56:49 | null / [TestClass name=class tigase.tests.server.TestTwoWayTLS]

2021-05-26 22:56:49 | ------------------------------------

2021-05-26 22:56:49 | == testing connection with WRONG certificate

2021-05-26 22:56:49 | [
[
Version: V1
Subject: CN=domain, CN=*.domain, EMAILADDRESS=alice@coffeebean.local, OU=org, O=org, L=tr, ST=kp, C=PL
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

Key: Sun RSA public key, 1024 bits
params: null
modulus: 96762429089934322329828915499555683320407756434936200604566999150070033624920376136973883635145874294104776979275520155811194128564617104207775233089701375385180272864482873680466681601538588184329422594177990654869022932116796677362703391293843730727235088396426584374047778857062014195601109377750246997207
public exponent: 65537
Validity: [From: Wed May 26 22:56:49 PDT 2021,
 To: Thu May 26 22:56:49 PDT 2022]
Issuer: CN=domain, CN=*.domain, EMAILADDRESS=alice@coffeebean.local, OU=org, O=org, L=tr, ST=kp, C=PL
SerialNumber: [ 60af34a1]

]
Algorithm: [SHA1withRSA]
Signature:
0000: 6E F7 86 C4 1B D2 CB F3 AA 82 30 B9 1E E7 47 22 n.........0...G"
0010: 0B F0 E6 0A 16 A8 93 BE 8F E1 8B 5F 40 B8 0B 33 ..........._@..3
0020: 37 D3 BF 89 82 7A 3D C8 D2 B2 8B AD 03 15 2A 62 7....z=.......*b
0030: 2F EF 41 58 D4 E0 BB 3F 70 CA D0 81 92 47 F4 ED /.AX...?p....G..
0040: 27 CD C8 C5 B4 83 8C F7 A3 C9 26 FF CD B5 71 74 '.........&...qt
0050: 2D 8C DB CE CB EE B2 4E FE 2D AF AA 5E 0E 00 11 -......N.-..^...
0060: DA 61 49 5F 9E AB 7E FA 59 1C EE 5B DE 18 A5 52 .aI_....Y..[...R
0070: 33 61 97 BD 46 17 74 82 B9 57 54 6A 47 5D 36 32 3a..F.t..WTjG]62

]

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@63380374

2021-05-26 22:56:50 | StateChangedEvent{oldState=null, newState=connecting}

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@6dfff163

2021-05-26 22:56:50 | StateChangedEvent{oldState=connecting, newState=connected}

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@69c06804

2021-05-26 22:56:50 | >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-05-26 22:56:50 | StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]

2021-05-26 22:56:50 | two-way-tsl-user-WRONG :: two-way-tsl-user-WRONG_mnod0x0125@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-05-26 22:56:50 | StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>}

2021-05-26 22:56:50 | << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-05-26 22:56:50 | two-way-tsl-user-WRONG :: two-way-tsl-user-WRONG_mnod0x0125@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-05-26 22:56:50 | StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>}

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@2cc2fb58

2021-05-26 22:56:50 | ErrorEvent{condition=null, caught=tigase.jaxmpp.core.client.exceptions.JaxmppException: java.net.SocketException: Connection reset by peer (Write failed), sessionObject=AbstractSessionObject{properties={CONNECTOR#ENCRYPTED_KEY=Entry{scope=stream, value=true}, CONNECTOR#DISABLEKEEPALIVE=Entry{scope=stream, value=true}, StreamFeaturesModule#STREAMS_FEATURES_LIST=Entry{scope=session, value=[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]}, STREAMS_MANAGER_KEY=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.stream.XmppStreamsManager@f426e17}, userBareJid=Entry{scope=user, value=two-way-tsl-user-WRONG_mnod0x0125@a.localhost}, CONNECTOR#STAGE_KEY=Entry{scope=stream, value=connected}, HOSTNAME_VERIFIER_DISABLED_KEY=Entry{scope=user, value=true}, StreamFeaturesModule#PIPELINING_ACTIVE=Entry{scope=session, value=false}, TLS_DISABLED=Entry{scope=user, value=false}, password=Entry{scope=user, value=two-way-tsl-user-WRONG_mnod0x0125}, StreamFeaturesModule#EMBEDDED_STREAMS_COUNTER=Entry{scope=session, value=1}, IN_BAND_REGISTRATION_MODE_KEY=Entry{scope=session, value=true}, CONNECTOR#CONNECTOR_STAGE_TIMESTAMP_KEY=Entry{scope=stream, value=Wed May 26 22:56:50 PDT 2021}, TRUST_MANAGERS_KEY=Entry{scope=user, value=[Ljavax.net.ssl.X509TrustManager;@1d24f275}, KEY_MANAGERS_KEY=Entry{scope=session, value=[Ljavax.net.ssl.KeyManager;@774e399d}, COMPRESSION_DISABLED=Entry{scope=user, value=true}, BOSH#SEE_OTHER_HOST_KEY=Entry{scope=user, value=false}, RosterModule#ROSTER_STORE=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.modules.roster.DefaultRosterStore@4ced0417}, PresenceModule#PRESENCE_STORE=Entry{scope=user, value=tigase.jaxmpp.j2se.J2SEPresenceStore@50c3e94b}, ResponseManager#RESPONSE_MANAGER=Entry{scope=user, value=tigase.jaxmpp.j2se.ThreadSafeResponseManager@6a4e0e7c}, DEFAULT_XMPP_STREAM_KEY=Entry{scope=session, value=DefaultXMPPStream}, domainName=Entry{scope=user, value=a.localhost}, LOG_PREFIX=Entry{scope=user, value=two-way-tsl-user-WRONG}, socket#ServerHost=Entry{scope=user, value=localhost}}}}

2021-05-26 22:56:50 | StateChangedEvent{oldState=connected, newState=disconnected}

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@6c4a5079

2021-05-26 22:56:50 | Disconnected during registration!

2021-05-26 22:56:50 | [Mutex] notify: [registration]

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@48a33c5b

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@7651db5

2021-05-26 22:56:50 | [Mutex] received everything.

2021-05-26 22:56:50 | [Mutex] isItemNotified: registrationSuccess :: false

testConnectionWithoutCertificate

0.092s

2021-05-26 22:56:50 |

2021-05-26 22:56:50 | null / [TestClass name=class tigase.tests.server.TestTwoWayTLS]

2021-05-26 22:56:50 | ------------------------------------

2021-05-26 22:56:50 | == testing connection WITHOUT certificate

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@7eb0d71a

2021-05-26 22:56:50 | StateChangedEvent{oldState=null, newState=connecting}

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@707736bc

2021-05-26 22:56:50 | StateChangedEvent{oldState=connecting, newState=connected}

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@7448bc6a

2021-05-26 22:56:50 | >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-05-26 22:56:50 | two-way-tsl-user-WITHOUT :: two-way-tsl-user-WITHOUT_sgmske0126@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-05-26 22:56:50 | StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>}

2021-05-26 22:56:50 | StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]

2021-05-26 22:56:50 | << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-05-26 22:56:50 | two-way-tsl-user-WITHOUT :: two-way-tsl-user-WITHOUT_sgmske0126@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-05-26 22:56:50 | StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>}

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@314a3c87

2021-05-26 22:56:50 | ErrorEvent{condition=null, caught=tigase.jaxmpp.core.client.exceptions.JaxmppException: java.net.SocketException: Connection reset by peer (Write failed), sessionObject=AbstractSessionObject{properties={CONNECTOR#ENCRYPTED_KEY=Entry{scope=stream, value=true}, TRUST_MANAGERS_KEY=Entry{scope=user, value=[Ljavax.net.ssl.X509TrustManager;@1d24f275}, CONNECTOR#DISABLEKEEPALIVE=Entry{scope=stream, value=false}, StreamFeaturesModule#STREAMS_FEATURES_LIST=Entry{scope=session, value=[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]}, STREAMS_MANAGER_KEY=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.stream.XmppStreamsManager@493a35b3}, COMPRESSION_DISABLED=Entry{scope=user, value=true}, BOSH#SEE_OTHER_HOST_KEY=Entry{scope=user, value=false}, userBareJid=Entry{scope=user, value=two-way-tsl-user-WITHOUT_sgmske0126@a.localhost}, CONNECTOR#STAGE_KEY=Entry{scope=stream, value=disconnected}, HOSTNAME_VERIFIER_DISABLED_KEY=Entry{scope=user, value=true}, RosterModule#ROSTER_STORE=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.modules.roster.DefaultRosterStore@3128fe}, ResponseManager#RESPONSE_MANAGER=Entry{scope=user, value=tigase.jaxmpp.j2se.ThreadSafeResponseManager@31ab7f7e}, PresenceModule#PRESENCE_STORE=Entry{scope=user, value=tigase.jaxmpp.j2se.J2SEPresenceStore@5165c3c8}, StreamFeaturesModule#PIPELINING_ACTIVE=Entry{scope=session, value=false}, TLS_DISABLED=Entry{scope=user, value=false}, password=Entry{scope=user, value=two-way-tsl-user-WITHOUT_sgmske0126}, DEFAULT_XMPP_STREAM_KEY=Entry{scope=session, value=DefaultXMPPStream}, domainName=Entry{scope=user, value=a.localhost}, StreamFeaturesModule#EMBEDDED_STREAMS_COUNTER=Entry{scope=session, value=1}, LOG_PREFIX=Entry{scope=user, value=two-way-tsl-user-WITHOUT}, socket#ServerHost=Entry{scope=user, value=localhost}, IN_BAND_REGISTRATION_MODE_KEY=Entry{scope=session, value=true}, CONNECTOR#CONNECTOR_STAGE_TIMESTAMP_KEY=Entry{scope=stream, value=Wed May 26 22:56:50 PDT 2021}}}}

2021-05-26 22:56:50 | StateChangedEvent{oldState=connected, newState=disconnected}

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@496ae3fa

2021-05-26 22:56:50 | Disconnected during registration!

2021-05-26 22:56:50 | [Mutex] notify: [registration]

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@401544f1

2021-05-26 22:56:50 | tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@2aaf9302

2021-05-26 22:56:50 | [Mutex] received everything.

2021-05-26 22:56:50 | [Mutex] isItemNotified: registrationSuccess :: false

C2S: TLS - Client Cert: Two-way TLS - #2939