Tuesday, February 20, 2007

XMPP without TLS

Today we have set up our own Jabber server. We did this in order to communicate through Jabber without TLS, so we could sniff packages which are not encrypted.

We used jabberd14 as server.
And tested it with 2 clients, namely
imcom (ncurses based console jabber client) and
Gaim
They both seemed to work very well.


We also tried a program called
sendxmpp
which can be used from the command line. It can send XML which is potentially very handy for studying and debugging.
But we still have some trouble getting it work properly.

So now we can send messages to and from localhost, intranet and internet to our own server (builderbob.dk)

http://www.archivesat.com/Jabberd_Development/thread1208507.htm
basically says that the server that we just set up should basically support libjingle.

Tomorrow we should try to connect to our server using GTalk. It might not work because the server is set up without the use of TLS.
If this is the case we will try to configure TLS on our jabberd server.

Cya to morrow
-----------------------------------------
Today 21/2 we saw that GTalk can only be used to connect to google servers using TLS, and is thus not very usefull for us to survey communication.

We tried to make a small app to send RAW XML towards our server without TLS. For that we have tried the Yaja library (Yet another jabber API), but the API was not so obvious as it seemed in the beginning.

We saw that sendxmpp could not send RAW data.

Next we will either
1) patch sendxmpp to send RAW data
2) make our Java app work with Yaja / hack Yaja to make our app work
3) figure out a way to use Gaim's Jabber implementation to send RAW XML

27/2 we found that PSI seems to have this functionality. It could save us a lot of time.

Thats it for now...

0 Comments:

Post a Comment

<< Home