An invalid certificate was declined. Jabber - Android

[silvakizir]

I have CUCM 8.6.2.22900-9 and CUPS 8.5.4.10000-16

When I installed Jabber for Android version 10.6 everything was fine.

When I upgraded Jabber through play store and I installed version 11.7 after I log in and I accept 2 times the certificates I have a message saying "An invalid certificate was declined".

I've read older posts saying this is a bug in version 10 but it should be fixed in version 11.

Can anyone help me? Is it still a bug or am I doing something wrong?

Configurations in Android, and CUCM are same in both situations. Nothing is changed.

[Nirmal Issac]

Hi Silva,

There were defect in earlier version, however that was for Jabber for iOS. I do not see any defect which was opened for Android. I'm referring the below defects.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCut61032

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuu29303

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuu32534

Could you collect a problem report from the Jabber client and attached here? I would like to chech which certificate is being rejected and why.

Also, do all the Jabber clients which upgrade to 11.7 face the issue?

Regards

Nirmal Issac

[silvakizir]

Yes dear Nirmal Issac every android has the same problem. They all work with version 10.6 and stop working with version 11.X

Can you please tell me how can I collect a problem report from my Jabber client?

Thank you.

[Nirmal Issac]

If the login is not successful, then you will see a message 'Send Problem Report' in the home page.

if the login is successful after the error, then navigate to Settings --> Problem Reporting.

Now enable Detailed Logging, relogin and recreate the issue.

Now navigate to Settings --> Problem Reporting and select 'SEND PROBLEM REPORT'

[silvakizir]

I am connected through the internal WiFi.

The login is not successful and a message appears "An invalid certificate was declined. Send problem report."

[Nirmal Issac]

Please click on 'Send Problem Report' and send it to nissac@cisco.com.

[Nirmal Issac · Accepted solution]

The XMPP certificate is not being trusted by the Jabber client.

2016-09-21 12:39:10,542 ERROR [0xb6fd8bec] [rc/cert/utils/AltNameParserImpl.cpp(394)] [csf.cert.utils] [verify] - No Match Found for 'cosmosint.gr'
2016-09-21 12:39:10,542 ERROR [0xb6fd8bec] [rc/cert/utils/AltNameParserImpl.cpp(394)] [csf.cert.utils] [verify] - No Match Found for '192.168.150.5'
2016-09-21 12:39:10,542 ERROR [0xb6fd8bec] [rc/cert/common/BaseCertVerifier.cpp(324)] [csf.cert.] [checkIdentifiers] - Verification of identity: 'cosmosint.gr' '192.168.150.5'  failed.
2016-09-21 12:39:10,542 INFO  [0xb6fd8bec] [rwerx/jwcpp/xmppsdk/XmppClient.cpp(1951)] [csf.jwcpp] [OnCertVerificationPending] - @XmppSDK: #0, OnCertVerificationPending cert, async-verification-id:0, done
2016-09-21 12:39:10,550 INFO  [0xb8b769c8] [ls/platform/utiltp/CmTransportTcp.h(101)] [csf.jwcpp] [Recv_i] - @MMTP: CCmTransportTcp::Recv_i 0 graceful disconnect by remote host this=0xb920e0a0
2016-09-21 12:39:10,550 INFO  [0xb8b769c8] [s/platform/utiltp/CmReactorBase.cpp(438)] [csf.jwcpp] [ProcessHandleEvent] - @MMTP: call RemoveHandleWithoutFinding_i, nOnCall: -1 this=0xb8b76d58
2016-09-21 12:39:10,551 INFO  [0xb8b769c8] [s/platform/utiltp/CmReactorBase.cpp(518)] [csf.jwcpp] [RemoveHandleWithoutFinding_i] - @MMTP: close the fd: 69 this=0xb8b76d58
2016-09-21 12:39:10,551 WARN  [0xb8b769c8] [s/platform/utiltp/CmReactorBase.cpp(279)] [csf.jwcpp] [RemoveHandler] - @MMTP: CCmReactorBase::RemoveHandler, handle not registed. aEh=0xb920e0a0 aMask=63 fdNew=69 rv=10011 this=0xb8b76d58
2016-09-21 12:39:10,551 INFO  [0xb8b769c8] [m/utiltp/CmTransportThreadProxy.cpp(380)] [csf.jwcpp] [OnDisconnect] - @MMTP: CCmTransportThreadProxy::OnDisconnect aReason = 20001 aTrptId = 0xb9238278 this=0xb8d53b10

2016-09-21 12:39:10,643 ERROR [0xb6fd8bec] [jwcpp/JabberWerxCPP/JWLoginSink.cpp(102)] [csf.jwcpp] [OnLoginError] - @JabberWerxCPP: JWLoginSink::OnError, lerr:18
2016-09-21 12:39:10,643 INFO  [0xb6fd8bec] [s/adapters/imp/components/Login.cpp(111)] [IMPServices] [OnLoginError] - OnLoginError: (data=0) LERR_JABBER_CERT <18>: Certificate Failure

Your version of CUPS server (8.5.4) is not supported by J4A 11.7.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/Android/11_7/RN/jaba_b_release-notes-for-android-117.html#JABA_RF_SBF12CE6_00

You need to upgrade CUPS Server atleast to 8.6.2 to bring in the compatibility.

[Nirmal Issac]

2016-09-21 12:39:10,550 INFO  [0xb8b769c8] [ls/platform/utiltp/CmTransportTcp.h(101)] [csf.jwcpp] [Recv_i] - @MMTP: CCmTransportTcp::Recv_i 0 graceful disconnect by remote host this=0xb920e0a0
2016-09-21 12:39:10,550 INFO  [0xb8b769c8] [s/platform/utiltp/CmReactorBase.cpp(438)] [csf.jwcpp] [ProcessHandleEvent] - @MMTP: call RemoveHandleWithoutFinding_i, nOnCall: -1 this=0xb8b76d58
2016-09-21 12:39:10,551 INFO  [0xb8b769c8] [s/platform/utiltp/CmReactorBase.cpp(518)] [csf.jwcpp] [RemoveHandleWithoutFinding_i] - @MMTP: close the fd: 69 this=0xb8b76d58
2016-09-21 12:39:10,551 WARN  [0xb8b769c8] [s/platform/utiltp/CmReactorBase.cpp(279)] [csf.jwcpp] [RemoveHandler] - @MMTP: CCmReactorBase::RemoveHandler, handle not registed. aEh=0xb920e0a0 aMask=63 fdNew=69 rv=10011 this=0xb8b76d58
2016-09-21 12:39:10,551 INFO  [0xb8b769c8] [m/utiltp/CmTransportThreadProxy.cpp(380)] [csf.jwcpp] [OnDisconnect] - @MMTP: CCmTransportThreadProxy::OnDisconnect aReason = 20001 aTrptId = 0xb9238278 this=0xb8d53b10
2016-09-21 12:39:10,636 ERROR [0xb6fd8bec] [rwerx/jwcpp/xmppsdk/XmppClient.cpp(1698)] [csf.jwcpp] [handleLog] - @XmppSDK: #0, TLS handshake failed!
2016-09-21 12:39:10,636 ERROR [0xb6fd8bec] [rwerx/jwcpp/xmppsdk/XmppClient.cpp(1698)] [csf.jwcpp] [handleLog] - @XmppSDK: #0, TLS handshake failed!

[silvakizir]

Thank you my friend!!

[Nirmal Issac]

Also, are you logging over MRA? or Internal Login?