Test Results Report - C2S: TLS - Client Cert: Two-way TLS

Passed Tests
tigase.tests.server.TestTwoWayTLS
testConnectionWithCertificate	20.418s	2021-09-20 23:25:47 \| 2021-09-20 23:25:47 \| null / [TestClass name=class tigase.tests.server.TestTwoWayTLS] 2021-09-20 23:25:47 \| ------------------------------------ 2021-09-20 23:25:47 \| == test connection with OK certificate 2021-09-20 23:25:47 \| Private key: SunRsaSign RSA private CRT key, 1024 bits params: null modulus: 152761233143497582116717054095409374921484861881219838581049774918827920370633380183327557894608259805888440781489432167999315517717065393898030606251674341936883646661541606206019244807482197161925251151354063576657073657664807420344658857040469040824225256741751244332063539034528087632994997564807553381137 private exponent: 98495180855267006880449148387256336827780708968259540398261124082121436794199980362645365005944224275716342732542189079313656049508709817119416227440541220185215155267440596336780035042728733097642326630147794535561752716218858405844442745910716925045907430666325183330107989176483374996594251719256717909761 [ [ Version: V3 Subject: CN=Client, O=Internet Widgits Pty Ltd, ST=Some-State, C=US Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11 Key: Sun RSA public key, 1024 bits params: null modulus: 152761233143497582116717054095409374921484861881219838581049774918827920370633380183327557894608259805888440781489432167999315517717065393898030606251674341936883646661541606206019244807482197161925251151354063576657073657664807420344658857040469040824225256741751244332063539034528087632994997564807553381137 public exponent: 65537 Validity: [From: Mon Apr 20 04:19:08 PDT 2015, To: Fri Sep 05 04:19:08 PDT 2042] Issuer: CN=ROOT, O=Internet Widgits Pty Ltd, ST=Some-State, C=US SerialNumber: [ 96f20c6d 2893e805] Certificate Extensions: 4 [1]: ObjectId: 2.16.840.1.113730.1.13 Criticality=false Extension unknown: DER encoded OCTET string = 0000: 04 1F 16 1D 4F 70 65 6E 53 53 4C 20 47 65 6E 65 ....OpenSSL Gene 0010: 72 61 74 65 64 20 43 65 72 74 69 66 69 63 61 74 rated Certificat 0020: 65 e [2]: ObjectId: 2.5.29.35 Criticality=false AuthorityKeyIdentifier [ KeyIdentifier [ 0000: 62 A9 11 75 F0 62 1D B8 CA F9 F3 7E A2 65 5A AB b..u.b.......eZ. 0010: C9 97 49 0D ..I. ] ] [3]: ObjectId: 2.5.29.19 Criticality=false BasicConstraints:[ CA:false PathLen: undefined ] [4]: ObjectId: 2.5.29.14 Criticality=false SubjectKeyIdentifier [ KeyIdentifier [ 0000: C1 FA 2F 1F 5C 62 EC 83 B0 7B 91 A7 A7 46 BB 62 ../.\b.......F.b 0010: 5D 23 3F D0 ]#?. ] ] ] Algorithm: [SHA256withRSA] Signature: 0000: 61 8E 44 18 EC 3B A3 3E DF 8A DF 64 6F 79 FD C2 a.D..;.>...doy.. 0010: 66 4F AC 58 4A 75 FD 08 12 F8 B4 69 13 59 75 2A fO.XJu.....i.Yu* 0020: FD 64 F8 35 CC 40 64 D9 E3 F4 12 C1 68 A4 04 4E .d.5.@d.....h..N 0030: 11 CB B2 ED 81 30 AA 5E C9 F9 C7 57 0A 1E B6 2C .....0.^...W..., 0040: F5 28 95 E9 D7 FD 95 36 A5 10 D1 0E 85 08 55 A0 .(.....6......U. 0050: C5 61 B9 B1 56 3A 81 D8 F5 95 E8 04 AB DB EE C3 .a..V:.......... 0060: 2F B3 FC 70 00 F9 4F DD D5 92 2E 25 0C 08 C2 56 /..p..O....%...V 0070: 94 9B CA 9F BA 64 4A 1F 11 91 C4 21 C2 75 D3 01 .....dJ....!.u.. 0080: E3 91 27 7C F1 7B E0 8B F9 1C ED 06 7D 6F 02 FC ..'..........o.. 0090: C4 CD 63 98 64 20 F3 A9 18 51 F8 41 57 B0 AE C9 ..c.d ...Q.AW... 00A0: A4 C7 C3 AD 3E 2C CF 30 59 E9 22 CD A3 6A F7 49 ....>,.0Y."..j.I 00B0: BA 42 7F D7 D6 4B D0 BE AB A5 7C 46 F0 11 C1 D7 .B...K.....F.... 00C0: 89 C8 2E F4 83 9B 90 AD 49 1E B1 A1 DD F6 C7 79 ........I......y 00D0: 89 7F 1E 3F 2E 18 33 D8 90 71 8C 44 86 CF 66 B5 ...?..3..q.D..f. 00E0: D7 89 60 1B 48 C7 CF 9E A1 AC 0C 3D 6B CA 7A F8 ..`.H......=k.z. 00F0: AD 92 55 9C 4E F7 58 A9 C8 16 4D 48 A3 46 8F D2 ..U.N.X...MH.F.. ] 2021-09-20 23:25:48 \| tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@53ae5cfc 2021-09-20 23:25:48 \| StateChangedEvent{oldState=null, newState=connecting} 2021-09-20 23:25:48 \| tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@5d69a8f9 2021-09-20 23:25:48 \| StateChangedEvent{oldState=connecting, newState=connected} 2021-09-20 23:25:48 \| tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@5956378c 2021-09-20 23:25:48 \| >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-09-20 23:25:48 \| StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>] 2021-09-20 23:25:48 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-09-20 23:25:48 \| StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>} 2021-09-20 23:25:48 \| << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-09-20 23:25:48 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-09-20 23:25:48 \| StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>} 2021-09-20 23:25:48 \| tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@1c54a2c2 2021-09-20 23:25:48 \| tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@3d3c4408 2021-09-20 23:25:48 \| >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-09-20 23:25:48 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-09-20 23:25:48 \| StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>} 2021-09-20 23:25:48 \| StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>] 2021-09-20 23:25:48 \| << <iq to="a.localhost" id="uELt8w8AdBlXeX9mbHOCeN4" type="get"><query xmlns="jabber:iq:register"/></iq> 2021-09-20 23:25:48 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost >> <iq to="a.localhost" id="uELt8w8AdBlXeX9mbHOCeN4" type="get"><query xmlns="jabber:iq:register"/></iq> 2021-09-20 23:25:48 \| StanzaSendingEvent{stanza=<iq to="a.localhost" id="uELt8w8AdBlXeX9mbHOCeN4" type="get"><query xmlns="jabber:iq:register"/></iq>} 2021-09-20 23:25:48 \| >> <iq xmlns="jabber:client" id="uELt8w8AdBlXeX9mbHOCeN4" type="result" from="a.localhost"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x xmlns="jabber:x:data" type="form"><title>Account Registration</title><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field type="hidden" var="FORM_TYPE"><value>jabber:iq:register</value></field><field type="text-single" var="username" label="Username"><required/><value/></field><field type="text-private" var="password" label="Password"><required/><value/></field><field type="text-single" var="email" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq> 2021-09-20 23:25:48 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost << <iq xmlns="jabber:client" id="uELt8w8AdBlXeX9mbHOCeN4" type="result" from="a.localhost"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x xmlns="jabber:x:data" type="form"><title>Account Registration</title><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field type="hidden" var="FORM_TYPE"><value>jabber:iq:register</value></field><field type="text-single" var="username" label="Username"><required/><value/></field><field type="text-private" var="password" label="Password"><required/><value/></field><field type="text-single" var="email" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq> 2021-09-20 23:25:48 \| StanzaReceivedEvent{stanza=<iq xmlns="jabber:client" id="uELt8w8AdBlXeX9mbHOCeN4" type="result" from="a.localhost"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x xmlns="jabber:x:data" type="form"><title>Account Registration</title><instructions>Choose a user name and password for use with this service. Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field type="hidden" var="FORM_TYPE"><value>jabber:iq:register</value></field><field type="text-single" var="username" label="Username"><required/><value/></field><field type="text-private" var="password" label="Password"><required/><value/></field><field type="text-single" var="email" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq>} 2021-09-20 23:25:48 \| tigase.jaxmpp.core.client.xmpp.modules.registration.InBandRegistrationModule$ReceivedRequestedFieldsHandler$ReceivedRequestedFieldsEvent@4500a55d 2021-09-20 23:25:48 \| << <iq to="a.localhost" id="IJYZoMyrmIr38KRXfCwbLLI" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_enhr3k0124</username><password>two-way-tsl-user-OK_enhr3k0124</password><email>40f168de-4fea-44d9-8065-034f62dd8837@localhost</email></query></iq> 2021-09-20 23:25:48 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost >> <iq to="a.localhost" id="IJYZoMyrmIr38KRXfCwbLLI" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_enhr3k0124</username><password>two-way-tsl-user-OK_enhr3k0124</password><email>40f168de-4fea-44d9-8065-034f62dd8837@localhost</email></query></iq> 2021-09-20 23:25:48 \| StanzaSendingEvent{stanza=<iq to="a.localhost" id="IJYZoMyrmIr38KRXfCwbLLI" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_enhr3k0124</username><password>two-way-tsl-user-OK_enhr3k0124</password><email>40f168de-4fea-44d9-8065-034f62dd8837@localhost</email></query></iq>} 2021-09-20 23:25:48 \| >> <iq xmlns="jabber:client" id="IJYZoMyrmIr38KRXfCwbLLI" type="result" from="a.localhost"/> 2021-09-20 23:25:48 \| two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost << <iq xmlns="jabber:client" id="IJYZoMyrmIr38KRXfCwbLLI" type="result" from="a.localhost"/> 2021-09-20 23:25:48 \| StanzaReceivedEvent{stanza=<iq xmlns="jabber:client" id="IJYZoMyrmIr38KRXfCwbLLI" type="result" from="a.localhost"/>} 2021-09-20 23:26:08 \| StateChangedEvent{oldState=connected, newState=disconnected} 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@7c7b5d8d 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@23384a0e 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@1e6e88f2 2021-09-20 23:26:08 \| Disconnected during registration! 2021-09-20 23:26:08 \| [Mutex] notify: [registration] 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@5e04ec2f 2021-09-20 23:26:08 \| [Mutex] received everything. 2021-09-20 23:26:08 \| [Mutex] isItemNotified: registrationSuccess :: true
testConnectionWithWrongCertificate	0.547s	2021-09-20 23:26:08 \| 2021-09-20 23:26:08 \| null / [TestClass name=class tigase.tests.server.TestTwoWayTLS] 2021-09-20 23:26:08 \| ------------------------------------ 2021-09-20 23:26:08 \| == testing connection with WRONG certificate 2021-09-20 23:26:08 \| [ [ Version: V1 Subject: CN=domain, CN=.domain, EMAILADDRESS=alice@coffeebean.local, OU=org, O=org, L=tr, ST=kp, C=PL Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5 Key: Sun RSA public key, 1024 bits params: null modulus: 120395707602940015658598693786873790949750483061388407181385743313039786717542078502168776755028294761920357846535944671296756488056073965916765471831935534569257196692665682619950118127205298865763893654790131019153242186446524772727653359484832738606438155285363783137363181623369674749188159909841664506091 public exponent: 65537 Validity: [From: Mon Sep 20 23:26:08 PDT 2021, To: Tue Sep 20 23:26:08 PDT 2022] Issuer: CN=domain, CN=.domain, EMAILADDRESS=alice@coffeebean.local, OU=org, O=org, L=tr, ST=kp, C=PL SerialNumber: [ 61497b00] ] Algorithm: [SHA1withRSA] Signature: 0000: 21 03 32 CE A6 49 1F E8 26 EB 69 54 E6 61 D3 5A !.2..I..&.iT.a.Z 0010: B3 17 44 BF 85 E4 1D 44 AB 49 AC 65 9F F2 CA C3 ..D....D.I.e.... 0020: 28 98 B8 A8 E8 94 23 C9 85 AE 61 FC 48 FD 29 6D (.....#...a.H.)m 0030: 7B 21 71 FD 1F 39 2A E9 24 BA 1C 1D 7D 81 CD 92 .!q..9*.$....... 0040: 70 C8 90 50 D6 7D 0B C3 BE A7 8A C3 B9 0D F3 75 p..P...........u 0050: 0F F7 C1 61 67 12 2C 9B 4B FB 98 19 96 F3 F0 7E ...ag.,.K....... 0060: F3 0E 9E CF 84 70 12 91 6B A7 D3 75 5B 5E 3F BE .....p..k..u[^?. 0070: BC 56 98 A0 FC 94 AB 26 40 B0 65 A4 61 B8 27 20 .V.....&@.e.a.' ] 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@462dda84 2021-09-20 23:26:08 \| StateChangedEvent{oldState=null, newState=connecting} 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@48ea3c31 2021-09-20 23:26:08 \| StateChangedEvent{oldState=connecting, newState=connected} 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@4cd5b1f4 2021-09-20 23:26:08 \| StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>] 2021-09-20 23:26:08 \| >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-09-20 23:26:08 \| two-way-tsl-user-WRONG :: two-way-tsl-user-WRONG_s9rezv0125@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-09-20 23:26:08 \| StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>} 2021-09-20 23:26:08 \| << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-09-20 23:26:08 \| two-way-tsl-user-WRONG :: two-way-tsl-user-WRONG_s9rezv0125@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-09-20 23:26:08 \| StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>} 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@9d7360a 2021-09-20 23:26:08 \| ErrorEvent{condition=null, caught=tigase.jaxmpp.core.client.exceptions.JaxmppException: java.net.SocketException: Connection reset by peer (Write failed), sessionObject=AbstractSessionObject{properties={CONNECTOR#ENCRYPTED_KEY=Entry{scope=stream, value=true}, CONNECTOR#DISABLEKEEPALIVE=Entry{scope=stream, value=false}, StreamFeaturesModule#STREAMS_FEATURES_LIST=Entry{scope=session, value=[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]}, STREAMS_MANAGER_KEY=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.stream.XmppStreamsManager@2186344e}, userBareJid=Entry{scope=user, value=two-way-tsl-user-WRONG_s9rezv0125@a.localhost}, CONNECTOR#STAGE_KEY=Entry{scope=stream, value=disconnected}, HOSTNAME_VERIFIER_DISABLED_KEY=Entry{scope=user, value=true}, StreamFeaturesModule#PIPELINING_ACTIVE=Entry{scope=session, value=false}, TLS_DISABLED=Entry{scope=user, value=false}, password=Entry{scope=user, value=two-way-tsl-user-WRONG_s9rezv0125}, StreamFeaturesModule#EMBEDDED_STREAMS_COUNTER=Entry{scope=session, value=1}, IN_BAND_REGISTRATION_MODE_KEY=Entry{scope=session, value=true}, CONNECTOR#CONNECTOR_STAGE_TIMESTAMP_KEY=Entry{scope=stream, value=Mon Sep 20 23:26:08 PDT 2021}, TRUST_MANAGERS_KEY=Entry{scope=user, value=[Ljavax.net.ssl.X509TrustManager;@38949ffb}, KEY_MANAGERS_KEY=Entry{scope=session, value=[Ljavax.net.ssl.KeyManager;@592fc30c}, COMPRESSION_DISABLED=Entry{scope=user, value=true}, BOSH#SEE_OTHER_HOST_KEY=Entry{scope=user, value=false}, RosterModule#ROSTER_STORE=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.modules.roster.DefaultRosterStore@69f8c945}, PresenceModule#PRESENCE_STORE=Entry{scope=user, value=tigase.jaxmpp.j2se.J2SEPresenceStore@794cb470}, ResponseManager#RESPONSE_MANAGER=Entry{scope=user, value=tigase.jaxmpp.j2se.ThreadSafeResponseManager@653b97e5}, DEFAULT_XMPP_STREAM_KEY=Entry{scope=session, value=DefaultXMPPStream}, domainName=Entry{scope=user, value=a.localhost}, LOG_PREFIX=Entry{scope=user, value=two-way-tsl-user-WRONG}, socket#ServerHost=Entry{scope=user, value=localhost}}}} 2021-09-20 23:26:08 \| StateChangedEvent{oldState=connected, newState=disconnected} 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@422b0fed 2021-09-20 23:26:08 \| Disconnected during registration! 2021-09-20 23:26:08 \| [Mutex] notify: [registration] 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@6db6540c 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@714582fe 2021-09-20 23:26:08 \| [Mutex] received everything. 2021-09-20 23:26:08 \| [Mutex] isItemNotified: registrationSuccess :: false
testConnectionWithoutCertificate	0.099s	2021-09-20 23:26:08 \| 2021-09-20 23:26:08 \| null / [TestClass name=class tigase.tests.server.TestTwoWayTLS] 2021-09-20 23:26:08 \| ------------------------------------ 2021-09-20 23:26:08 \| == testing connection WITHOUT certificate 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@41f3832f 2021-09-20 23:26:08 \| StateChangedEvent{oldState=null, newState=connecting} 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@4f347561 2021-09-20 23:26:08 \| StateChangedEvent{oldState=connecting, newState=connected} 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@4b0be85f 2021-09-20 23:26:08 \| StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>] 2021-09-20 23:26:08 \| >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-09-20 23:26:08 \| two-way-tsl-user-WITHOUT :: two-way-tsl-user-WITHOUT_k093xe0126@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features> 2021-09-20 23:26:08 \| StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>} 2021-09-20 23:26:08 \| << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-09-20 23:26:08 \| two-way-tsl-user-WITHOUT :: two-way-tsl-user-WITHOUT_k093xe0126@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> 2021-09-20 23:26:08 \| StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>} 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@e097f5a 2021-09-20 23:26:08 \| ErrorEvent{condition=null, caught=tigase.jaxmpp.core.client.exceptions.JaxmppException: java.net.SocketException: Connection reset by peer (Write failed), sessionObject=AbstractSessionObject{properties={CONNECTOR#ENCRYPTED_KEY=Entry{scope=stream, value=true}, TRUST_MANAGERS_KEY=Entry{scope=user, value=[Ljavax.net.ssl.X509TrustManager;@38949ffb}, CONNECTOR#DISABLEKEEPALIVE=Entry{scope=stream, value=false}, StreamFeaturesModule#STREAMS_FEATURES_LIST=Entry{scope=session, value=[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><sub xmlns="urn:xmpp:features:pre-approval"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]}, STREAMS_MANAGER_KEY=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.stream.XmppStreamsManager@533e7f4f}, COMPRESSION_DISABLED=Entry{scope=user, value=true}, BOSH#SEE_OTHER_HOST_KEY=Entry{scope=user, value=false}, userBareJid=Entry{scope=user, value=two-way-tsl-user-WITHOUT_k093xe0126@a.localhost}, CONNECTOR#STAGE_KEY=Entry{scope=stream, value=disconnected}, HOSTNAME_VERIFIER_DISABLED_KEY=Entry{scope=user, value=true}, RosterModule#ROSTER_STORE=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.modules.roster.DefaultRosterStore@3fcd9734}, ResponseManager#RESPONSE_MANAGER=Entry{scope=user, value=tigase.jaxmpp.j2se.ThreadSafeResponseManager@2b10c982}, PresenceModule#PRESENCE_STORE=Entry{scope=user, value=tigase.jaxmpp.j2se.J2SEPresenceStore@6e268015}, StreamFeaturesModule#PIPELINING_ACTIVE=Entry{scope=session, value=false}, TLS_DISABLED=Entry{scope=user, value=false}, password=Entry{scope=user, value=two-way-tsl-user-WITHOUT_k093xe0126}, DEFAULT_XMPP_STREAM_KEY=Entry{scope=session, value=DefaultXMPPStream}, domainName=Entry{scope=user, value=a.localhost}, StreamFeaturesModule#EMBEDDED_STREAMS_COUNTER=Entry{scope=session, value=1}, LOG_PREFIX=Entry{scope=user, value=two-way-tsl-user-WITHOUT}, socket#ServerHost=Entry{scope=user, value=localhost}, IN_BAND_REGISTRATION_MODE_KEY=Entry{scope=session, value=true}, CONNECTOR#CONNECTOR_STAGE_TIMESTAMP_KEY=Entry{scope=stream, value=Mon Sep 20 23:26:08 PDT 2021}}}} 2021-09-20 23:26:08 \| StateChangedEvent{oldState=connected, newState=disconnected} 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@4e424e99 2021-09-20 23:26:08 \| Disconnected during registration! 2021-09-20 23:26:08 \| [Mutex] notify: [registration] 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@1d651452 2021-09-20 23:26:08 \| tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@301482a5 2021-09-20 23:26:08 \| [Mutex] received everything. 2021-09-20 23:26:08 \| [Mutex] isItemNotified: registrationSuccess :: false

tigase.tests.server.TestTwoWayTLS

testConnectionWithCertificate

20.418s

2021-09-20 23:25:47 |

2021-09-20 23:25:47 | null / [TestClass name=class tigase.tests.server.TestTwoWayTLS]

2021-09-20 23:25:47 | ------------------------------------

2021-09-20 23:25:47 | == test connection with OK certificate

2021-09-20 23:25:47 | Private key: SunRsaSign RSA private CRT key, 1024 bits
params: null
modulus: 152761233143497582116717054095409374921484861881219838581049774918827920370633380183327557894608259805888440781489432167999315517717065393898030606251674341936883646661541606206019244807482197161925251151354063576657073657664807420344658857040469040824225256741751244332063539034528087632994997564807553381137
private exponent: 98495180855267006880449148387256336827780708968259540398261124082121436794199980362645365005944224275716342732542189079313656049508709817119416227440541220185215155267440596336780035042728733097642326630147794535561752716218858405844442745910716925045907430666325183330107989176483374996594251719256717909761
[
[
Version: V3
Subject: CN=Client, O=Internet Widgits Pty Ltd, ST=Some-State, C=US
Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11

Key: Sun RSA public key, 1024 bits
params: null
modulus: 152761233143497582116717054095409374921484861881219838581049774918827920370633380183327557894608259805888440781489432167999315517717065393898030606251674341936883646661541606206019244807482197161925251151354063576657073657664807420344658857040469040824225256741751244332063539034528087632994997564807553381137
public exponent: 65537
Validity: [From: Mon Apr 20 04:19:08 PDT 2015,
 To: Fri Sep 05 04:19:08 PDT 2042]
Issuer: CN=ROOT, O=Internet Widgits Pty Ltd, ST=Some-State, C=US
SerialNumber: [ 96f20c6d 2893e805]

Certificate Extensions: 4
[1]: ObjectId: 2.16.840.1.113730.1.13 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 1F 16 1D 4F 70 65 6E 53 53 4C 20 47 65 6E 65 ....OpenSSL Gene
0010: 72 61 74 65 64 20 43 65 72 74 69 66 69 63 61 74 rated Certificat
0020: 65 e

[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 62 A9 11 75 F0 62 1D B8 CA F9 F3 7E A2 65 5A AB b..u.b.......eZ.
0010: C9 97 49 0D ..I.
]
]

[3]: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:false
PathLen: undefined
]

[4]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: C1 FA 2F 1F 5C 62 EC 83 B0 7B 91 A7 A7 46 BB 62 ../.\b.......F.b
0010: 5D 23 3F D0 ]#?.
]
]

]
Algorithm: [SHA256withRSA]
Signature:
0000: 61 8E 44 18 EC 3B A3 3E DF 8A DF 64 6F 79 FD C2 a.D..;.>...doy..
0010: 66 4F AC 58 4A 75 FD 08 12 F8 B4 69 13 59 75 2A fO.XJu.....i.Yu*
0020: FD 64 F8 35 CC 40 64 D9 E3 F4 12 C1 68 A4 04 4E .d.5.@d.....h..N
0030: 11 CB B2 ED 81 30 AA 5E C9 F9 C7 57 0A 1E B6 2C .....0.^...W...,
0040: F5 28 95 E9 D7 FD 95 36 A5 10 D1 0E 85 08 55 A0 .(.....6......U.
0050: C5 61 B9 B1 56 3A 81 D8 F5 95 E8 04 AB DB EE C3 .a..V:..........
0060: 2F B3 FC 70 00 F9 4F DD D5 92 2E 25 0C 08 C2 56 /..p..O....%...V
0070: 94 9B CA 9F BA 64 4A 1F 11 91 C4 21 C2 75 D3 01 .....dJ....!.u..
0080: E3 91 27 7C F1 7B E0 8B F9 1C ED 06 7D 6F 02 FC ..'..........o..
0090: C4 CD 63 98 64 20 F3 A9 18 51 F8 41 57 B0 AE C9 ..c.d ...Q.AW...
00A0: A4 C7 C3 AD 3E 2C CF 30 59 E9 22 CD A3 6A F7 49 ....>,.0Y."..j.I
00B0: BA 42 7F D7 D6 4B D0 BE AB A5 7C 46 F0 11 C1 D7 .B...K.....F....
00C0: 89 C8 2E F4 83 9B 90 AD 49 1E B1 A1 DD F6 C7 79 ........I......y
00D0: 89 7F 1E 3F 2E 18 33 D8 90 71 8C 44 86 CF 66 B5 ...?..3..q.D..f.
00E0: D7 89 60 1B 48 C7 CF 9E A1 AC 0C 3D 6B CA 7A F8 ..`.H......=k.z.
00F0: AD 92 55 9C 4E F7 58 A9 C8 16 4D 48 A3 46 8F D2 ..U.N.X...MH.F..

]

2021-09-20 23:25:48 | tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@53ae5cfc

2021-09-20 23:25:48 | StateChangedEvent{oldState=null, newState=connecting}

2021-09-20 23:25:48 | tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@5d69a8f9

2021-09-20 23:25:48 | StateChangedEvent{oldState=connecting, newState=connected}

2021-09-20 23:25:48 | tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@5956378c

2021-09-20 23:25:48 | >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-09-20 23:25:48 | StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]

2021-09-20 23:25:48 | two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-09-20 23:25:48 | StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>}

2021-09-20 23:25:48 | << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-09-20 23:25:48 | two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-09-20 23:25:48 | StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>}

2021-09-20 23:25:48 | tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@1c54a2c2

2021-09-20 23:25:48 | tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@3d3c4408

2021-09-20 23:25:48 | >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-09-20 23:25:48 | two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-09-20 23:25:48 | StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>}

2021-09-20 23:25:48 | StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><auth xmlns="http://jabber.org/features/iq-auth"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-512</mechanism><mechanism>SCRAM-SHA-256</mechanism><mechanism>SCRAM-SHA-1</mechanism><mechanism>PLAIN</mechanism><mechanism>ANONYMOUS</mechanism></mechanisms><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]

2021-09-20 23:25:48 | << <iq to="a.localhost" id="uELt8w8AdBlXeX9mbHOCeN4" type="get"><query xmlns="jabber:iq:register"/></iq>

2021-09-20 23:25:48 | two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost >> <iq to="a.localhost" id="uELt8w8AdBlXeX9mbHOCeN4" type="get"><query xmlns="jabber:iq:register"/></iq>

2021-09-20 23:25:48 | StanzaSendingEvent{stanza=<iq to="a.localhost" id="uELt8w8AdBlXeX9mbHOCeN4" type="get"><query xmlns="jabber:iq:register"/></iq>}

2021-09-20 23:25:48 | >> <iq xmlns="jabber:client" id="uELt8w8AdBlXeX9mbHOCeN4" type="result" from="a.localhost"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x xmlns="jabber:x:data" type="form"><title>Account Registration</title><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field type="hidden" var="FORM_TYPE"><value>jabber:iq:register</value></field><field type="text-single" var="username" label="Username"><required/><value/></field><field type="text-private" var="password" label="Password"><required/><value/></field><field type="text-single" var="email" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq>

2021-09-20 23:25:48 | two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost << <iq xmlns="jabber:client" id="uELt8w8AdBlXeX9mbHOCeN4" type="result" from="a.localhost"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x xmlns="jabber:x:data" type="form"><title>Account Registration</title><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field type="hidden" var="FORM_TYPE"><value>jabber:iq:register</value></field><field type="text-single" var="username" label="Username"><required/><value/></field><field type="text-private" var="password" label="Password"><required/><value/></field><field type="text-single" var="email" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq>

2021-09-20 23:25:48 | StanzaReceivedEvent{stanza=<iq xmlns="jabber:client" id="uELt8w8AdBlXeX9mbHOCeN4" type="result" from="a.localhost"><query xmlns="jabber:iq:register"><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><x xmlns="jabber:x:data" type="form"><title>Account Registration</title><instructions>Choose a user name and password for use with this service.

Please also provide your e-mail address (must be valid!) to which we will send confirmation link.</instructions><field type="hidden" var="FORM_TYPE"><value>jabber:iq:register</value></field><field type="text-single" var="username" label="Username"><required/><value/></field><field type="text-private" var="password" label="Password"><required/><value/></field><field type="text-single" var="email" label="Email (MUST BE VALID!)"><required/><value/></field></x></query></iq>}

2021-09-20 23:25:48 | tigase.jaxmpp.core.client.xmpp.modules.registration.InBandRegistrationModule$ReceivedRequestedFieldsHandler$ReceivedRequestedFieldsEvent@4500a55d

2021-09-20 23:25:48 | << <iq to="a.localhost" id="IJYZoMyrmIr38KRXfCwbLLI" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_enhr3k0124</username><password>two-way-tsl-user-OK_enhr3k0124</password><email>40f168de-4fea-44d9-8065-034f62dd8837@localhost</email></query></iq>

2021-09-20 23:25:48 | two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost >> <iq to="a.localhost" id="IJYZoMyrmIr38KRXfCwbLLI" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_enhr3k0124</username><password>two-way-tsl-user-OK_enhr3k0124</password><email>40f168de-4fea-44d9-8065-034f62dd8837@localhost</email></query></iq>

2021-09-20 23:25:48 | StanzaSendingEvent{stanza=<iq to="a.localhost" id="IJYZoMyrmIr38KRXfCwbLLI" type="set"><query xmlns="jabber:iq:register"><username>two-way-tsl-user-OK_enhr3k0124</username><password>two-way-tsl-user-OK_enhr3k0124</password><email>40f168de-4fea-44d9-8065-034f62dd8837@localhost</email></query></iq>}

2021-09-20 23:25:48 | >> <iq xmlns="jabber:client" id="IJYZoMyrmIr38KRXfCwbLLI" type="result" from="a.localhost"/>

2021-09-20 23:25:48 | two-way-tsl-user-OK :: two-way-tsl-user-OK_enhr3k0124@a.localhost << <iq xmlns="jabber:client" id="IJYZoMyrmIr38KRXfCwbLLI" type="result" from="a.localhost"/>

2021-09-20 23:25:48 | StanzaReceivedEvent{stanza=<iq xmlns="jabber:client" id="IJYZoMyrmIr38KRXfCwbLLI" type="result" from="a.localhost"/>}

2021-09-20 23:26:08 | StateChangedEvent{oldState=connected, newState=disconnected}

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@7c7b5d8d

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@23384a0e

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@1e6e88f2

2021-09-20 23:26:08 | Disconnected during registration!

2021-09-20 23:26:08 | [Mutex] notify: [registration]

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@5e04ec2f

2021-09-20 23:26:08 | [Mutex] received everything.

2021-09-20 23:26:08 | [Mutex] isItemNotified: registrationSuccess :: true

testConnectionWithWrongCertificate

0.547s

2021-09-20 23:26:08 |

2021-09-20 23:26:08 | null / [TestClass name=class tigase.tests.server.TestTwoWayTLS]

2021-09-20 23:26:08 | ------------------------------------

2021-09-20 23:26:08 | == testing connection with WRONG certificate

2021-09-20 23:26:08 | [
[
Version: V1
Subject: CN=domain, CN=*.domain, EMAILADDRESS=alice@coffeebean.local, OU=org, O=org, L=tr, ST=kp, C=PL
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

Key: Sun RSA public key, 1024 bits
params: null
modulus: 120395707602940015658598693786873790949750483061388407181385743313039786717542078502168776755028294761920357846535944671296756488056073965916765471831935534569257196692665682619950118127205298865763893654790131019153242186446524772727653359484832738606438155285363783137363181623369674749188159909841664506091
public exponent: 65537
Validity: [From: Mon Sep 20 23:26:08 PDT 2021,
 To: Tue Sep 20 23:26:08 PDT 2022]
Issuer: CN=domain, CN=*.domain, EMAILADDRESS=alice@coffeebean.local, OU=org, O=org, L=tr, ST=kp, C=PL
SerialNumber: [ 61497b00]

]
Algorithm: [SHA1withRSA]
Signature:
0000: 21 03 32 CE A6 49 1F E8 26 EB 69 54 E6 61 D3 5A !.2..I..&.iT.a.Z
0010: B3 17 44 BF 85 E4 1D 44 AB 49 AC 65 9F F2 CA C3 ..D....D.I.e....
0020: 28 98 B8 A8 E8 94 23 C9 85 AE 61 FC 48 FD 29 6D (.....#...a.H.)m
0030: 7B 21 71 FD 1F 39 2A E9 24 BA 1C 1D 7D 81 CD 92 .!q..9*.$.......
0040: 70 C8 90 50 D6 7D 0B C3 BE A7 8A C3 B9 0D F3 75 p..P...........u
0050: 0F F7 C1 61 67 12 2C 9B 4B FB 98 19 96 F3 F0 7E ...ag.,.K.......
0060: F3 0E 9E CF 84 70 12 91 6B A7 D3 75 5B 5E 3F BE .....p..k..u[^?.
0070: BC 56 98 A0 FC 94 AB 26 40 B0 65 A4 61 B8 27 20 .V.....&@.e.a.'

]

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@462dda84

2021-09-20 23:26:08 | StateChangedEvent{oldState=null, newState=connecting}

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@48ea3c31

2021-09-20 23:26:08 | StateChangedEvent{oldState=connecting, newState=connected}

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@4cd5b1f4

2021-09-20 23:26:08 | StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]

2021-09-20 23:26:08 | >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-09-20 23:26:08 | two-way-tsl-user-WRONG :: two-way-tsl-user-WRONG_s9rezv0125@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-09-20 23:26:08 | StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>}

2021-09-20 23:26:08 | << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-09-20 23:26:08 | two-way-tsl-user-WRONG :: two-way-tsl-user-WRONG_s9rezv0125@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-09-20 23:26:08 | StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>}

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@9d7360a

2021-09-20 23:26:08 | ErrorEvent{condition=null, caught=tigase.jaxmpp.core.client.exceptions.JaxmppException: java.net.SocketException: Connection reset by peer (Write failed), sessionObject=AbstractSessionObject{properties={CONNECTOR#ENCRYPTED_KEY=Entry{scope=stream, value=true}, CONNECTOR#DISABLEKEEPALIVE=Entry{scope=stream, value=false}, StreamFeaturesModule#STREAMS_FEATURES_LIST=Entry{scope=session, value=[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]}, STREAMS_MANAGER_KEY=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.stream.XmppStreamsManager@2186344e}, userBareJid=Entry{scope=user, value=two-way-tsl-user-WRONG_s9rezv0125@a.localhost}, CONNECTOR#STAGE_KEY=Entry{scope=stream, value=disconnected}, HOSTNAME_VERIFIER_DISABLED_KEY=Entry{scope=user, value=true}, StreamFeaturesModule#PIPELINING_ACTIVE=Entry{scope=session, value=false}, TLS_DISABLED=Entry{scope=user, value=false}, password=Entry{scope=user, value=two-way-tsl-user-WRONG_s9rezv0125}, StreamFeaturesModule#EMBEDDED_STREAMS_COUNTER=Entry{scope=session, value=1}, IN_BAND_REGISTRATION_MODE_KEY=Entry{scope=session, value=true}, CONNECTOR#CONNECTOR_STAGE_TIMESTAMP_KEY=Entry{scope=stream, value=Mon Sep 20 23:26:08 PDT 2021}, TRUST_MANAGERS_KEY=Entry{scope=user, value=[Ljavax.net.ssl.X509TrustManager;@38949ffb}, KEY_MANAGERS_KEY=Entry{scope=session, value=[Ljavax.net.ssl.KeyManager;@592fc30c}, COMPRESSION_DISABLED=Entry{scope=user, value=true}, BOSH#SEE_OTHER_HOST_KEY=Entry{scope=user, value=false}, RosterModule#ROSTER_STORE=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.modules.roster.DefaultRosterStore@69f8c945}, PresenceModule#PRESENCE_STORE=Entry{scope=user, value=tigase.jaxmpp.j2se.J2SEPresenceStore@794cb470}, ResponseManager#RESPONSE_MANAGER=Entry{scope=user, value=tigase.jaxmpp.j2se.ThreadSafeResponseManager@653b97e5}, DEFAULT_XMPP_STREAM_KEY=Entry{scope=session, value=DefaultXMPPStream}, domainName=Entry{scope=user, value=a.localhost}, LOG_PREFIX=Entry{scope=user, value=two-way-tsl-user-WRONG}, socket#ServerHost=Entry{scope=user, value=localhost}}}}

2021-09-20 23:26:08 | StateChangedEvent{oldState=connected, newState=disconnected}

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@422b0fed

2021-09-20 23:26:08 | Disconnected during registration!

2021-09-20 23:26:08 | [Mutex] notify: [registration]

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@6db6540c

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@714582fe

2021-09-20 23:26:08 | [Mutex] received everything.

2021-09-20 23:26:08 | [Mutex] isItemNotified: registrationSuccess :: false

testConnectionWithoutCertificate

0.099s

2021-09-20 23:26:08 |

2021-09-20 23:26:08 | null / [TestClass name=class tigase.tests.server.TestTwoWayTLS]

2021-09-20 23:26:08 | ------------------------------------

2021-09-20 23:26:08 | == testing connection WITHOUT certificate

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.SessionObject$ClearedHandler$ClearedEvent@41f3832f

2021-09-20 23:26:08 | StateChangedEvent{oldState=null, newState=connecting}

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$StreamRestartedHandler$StreamRestaredEvent@4f347561

2021-09-20 23:26:08 | StateChangedEvent{oldState=connecting, newState=connected}

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$ConnectedHandler$ConnectedEvent@4b0be85f

2021-09-20 23:26:08 | StreamFeaturesReceivedEvent[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]

2021-09-20 23:26:08 | >> <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-09-20 23:26:08 | two-way-tsl-user-WITHOUT :: two-way-tsl-user-WITHOUT_k093xe0126@a.localhost << <features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>

2021-09-20 23:26:08 | StanzaReceivedEvent{stanza=<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>}

2021-09-20 23:26:08 | << <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-09-20 23:26:08 | two-way-tsl-user-WITHOUT :: two-way-tsl-user-WITHOUT_k093xe0126@a.localhost >> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>

2021-09-20 23:26:08 | StanzaSendingEvent{stanza=<starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>}

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$EncryptionEstablishedHandler$EncryptionEstablishedEvent@e097f5a

2021-09-20 23:26:08 | ErrorEvent{condition=null, caught=tigase.jaxmpp.core.client.exceptions.JaxmppException: java.net.SocketException: Connection reset by peer (Write failed), sessionObject=AbstractSessionObject{properties={CONNECTOR#ENCRYPTED_KEY=Entry{scope=stream, value=true}, TRUST_MANAGERS_KEY=Entry{scope=user, value=[Ljavax.net.ssl.X509TrustManager;@38949ffb}, CONNECTOR#DISABLEKEEPALIVE=Entry{scope=stream, value=false}, StreamFeaturesModule#STREAMS_FEATURES_LIST=Entry{scope=session, value=[<features xmlns="http://etherx.jabber.org/streams"><sm xmlns="urn:xmpp:sm:3"/><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"/><register xmlns="http://jabber.org/features/iq-register"/><ver xmlns="urn:xmpp:features:rosterver"/><starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"><required/></starttls><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression></features>]}, STREAMS_MANAGER_KEY=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.stream.XmppStreamsManager@533e7f4f}, COMPRESSION_DISABLED=Entry{scope=user, value=true}, BOSH#SEE_OTHER_HOST_KEY=Entry{scope=user, value=false}, userBareJid=Entry{scope=user, value=two-way-tsl-user-WITHOUT_k093xe0126@a.localhost}, CONNECTOR#STAGE_KEY=Entry{scope=stream, value=disconnected}, HOSTNAME_VERIFIER_DISABLED_KEY=Entry{scope=user, value=true}, RosterModule#ROSTER_STORE=Entry{scope=user, value=tigase.jaxmpp.core.client.xmpp.modules.roster.DefaultRosterStore@3fcd9734}, ResponseManager#RESPONSE_MANAGER=Entry{scope=user, value=tigase.jaxmpp.j2se.ThreadSafeResponseManager@2b10c982}, PresenceModule#PRESENCE_STORE=Entry{scope=user, value=tigase.jaxmpp.j2se.J2SEPresenceStore@6e268015}, StreamFeaturesModule#PIPELINING_ACTIVE=Entry{scope=session, value=false}, TLS_DISABLED=Entry{scope=user, value=false}, password=Entry{scope=user, value=two-way-tsl-user-WITHOUT_k093xe0126}, DEFAULT_XMPP_STREAM_KEY=Entry{scope=session, value=DefaultXMPPStream}, domainName=Entry{scope=user, value=a.localhost}, StreamFeaturesModule#EMBEDDED_STREAMS_COUNTER=Entry{scope=session, value=1}, LOG_PREFIX=Entry{scope=user, value=two-way-tsl-user-WITHOUT}, socket#ServerHost=Entry{scope=user, value=localhost}, IN_BAND_REGISTRATION_MODE_KEY=Entry{scope=session, value=true}, CONNECTOR#CONNECTOR_STAGE_TIMESTAMP_KEY=Entry{scope=stream, value=Mon Sep 20 23:26:08 PDT 2021}}}}

2021-09-20 23:26:08 | StateChangedEvent{oldState=connected, newState=disconnected}

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$StreamTerminatedHandler$StreamTerminatedEvent@4e424e99

2021-09-20 23:26:08 | Disconnected during registration!

2021-09-20 23:26:08 | [Mutex] notify: [registration]

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.Connector$DisconnectedHandler$DisconnectedEvent@1d651452

2021-09-20 23:26:08 | tigase.jaxmpp.core.client.JaxmppCore$LoggedOutHandler$LoggedOutEvent@301482a5

2021-09-20 23:26:08 | [Mutex] received everything.

2021-09-20 23:26:08 | [Mutex] isItemNotified: registrationSuccess :: false

C2S: TLS - Client Cert: Two-way TLS - #2939