Big problem on SASL

Hi all,

we are experiencing a big problem on Openfire server.

we have two machine deployed

  1. Windows 2012R2 64BIT 8Cores 32gb ram where runs openfire 3.9.3

  2. Windows 2013R2 64BIT 4Cores 16gb ram where runs mysql

Our current customer base is 10k concurrent connection

Connecting

Connected

SENT: <stream:stream xmlns:stream=“http://etherx.jabber.org/streams” id="10021b4

5" xmlns=“jabber:client” to=“messages.whichapp.it” version=“1.0”>

RECV: <?xml version='1.0' encoding='UTF-8'?><stream:stream xmlns:stream="http://

etherx.jabber.org/streams" xmlns=“jabber:client” from=“messages.whichapp.it” id=

“francesco927808b0” xml:lang=“en” version=“1.0”>

RECV: stream:features<requir

ed/>D

IGEST-MD5PLAINCRAM-MD5

</stream:features>

SENT:

RECV:

Invalid certificate (RemoteCertificateNameMismatch, RemoteCertificateChainErrors

):

[Version]

V1

[Subject]

CN=John Doe, OU=XMPP, O=Jive Software, L=Portland, S=OR, C=US

Simple Name: John Doe

DNS Name: John Doe

[Issuer]

CN=John Doe, OU=XMPP, O=Jive Software, L=Portland, S=OR, C=US

Simple Name: John Doe

DNS Name: John Doe

[Serial Number]

432E244D

[Not Before]

19/09/2005 04:37:01

[Not After]

29/07/2015 04:37:01

[Thumbprint]

4BEBB26242704B2D1AA6A647F3E5B1E7548C11FD

[Signature Algorithm]

md5RSA(1.2.840.113549.1.1.4)

[Public Key]

Algorithm: RSA

Length: 1024

Key Blob: 30 81 89 02 81 81 00 a3 d4 1d 12 21 f5 bd 4b 4a e9 c2 81 57 99 b3 68

a2 80 87 4d ee f9 56 93 2e 04 d7 e9 a0 f3 68 53 6a 6b f1 d6 0e a7 10 7f ef 8e 7

1 85 e5 2d a4 b6 2a 0b b0 ee 38 b2 85 01 a5 72 13 b2 c7 18 9a 69 69 78 1e 51 03

fc 8f 24 56 ee 60 f0 b0 b2 22 db 75 e2 fc 9f 3f 59 00 fb de 68 6d bd 38 1b 56 30

92 7d a5 8d 1e e3 51 83 12 f8 ce e4 8f de 1c 88 ac 78 1b 57 97 fa 81 87 74 ea 1

6 2d 81 12 aa 77 02 03 01 00 01

Parameters: 05 00

SENT: <stream:stream xmlns:stream=“http://etherx.jabber.org/streams” id="a889254

3" xmlns=“jabber:client” to=“messages.whichapp.it” version=“1.0”>

RECV: <?xml version='1.0' encoding='UTF-8'?><stream:stream xmlns:stream="http://

etherx.jabber.org/streams" xmlns=“jabber:client” from=“messages.whichapp.it” id=

“francesco927808b0” xml:lang=“en” version=“1.0”>stream:features<mechanisms xml

ns=“urn:ietf:params:xml:ns:xmpp-sasl”>DIGEST-MD5<mechanis

m>PLAINCRAM-MD5<auth xmlns="http

://jabber.org/features/iq-auth"/><register xmlns="http://jabber.org/features/iq-

register"/></stream:features>

SENT: (MOST OF THE TIME CLIENTS ARE NOT ABLE TO CONNECT AND CONNECTION PROCESS ON OPENFIRE HANGS HERE, NOT REPLING TO THE AUTH)

Can anyone help us?

Regards