Uploaded image for project: 'HipChat'
  1. HipChat
  2. HCPUB-2835

Windows client loses login credentials due to certificate error

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

    XMLWordPrintable

Details

    • Severity 3 - Minor

    Description

      Summary

      A certificate error causes the HipChat Windows client to forgot user login credentials. The user has to log in each time they restart their computer or are randomly being logged out.

      Environment

      • Windows 4.29

      Step to reproduce

      1. Open HipChat
      2. HipChat throws a certificate error in a pop-up
      3. Accept or not, client will randomly force the user to log out
      4. Client loses user credentials and prompts user to re-login
      5. Restarting will also force user to re-enter credentials

      Error log:

      [08:11:54][void __thiscall AbstractOnlineStatus::handleOnlineStatusResult(bool):179] handleOnlineStatusResult no change :  true
      [08:11:54][void __thiscall AuthHelper::handleSslErrors(class QNetworkReply *,const class QList<class QSslError> &):250] SSL Handshake errors encountered. List of error codes follow: 
      [08:11:54][void __thiscall AuthHelper::handleSslErrors(class QNetworkReply *,const class QList<class QSslError> &):253] "The host name did not match any of the valid hosts for this certificate"
      [08:11:54][void __thiscall AuthHelper::handleSslErrors(class QNetworkReply *,const class QList<class QSslError> &):253] "The certificate is self-signed, and untrusted"
      [08:11:54][void __thiscall AuthHelper::handleSslErrors(class QNetworkReply *,const class QList<class QSslError> &):264] Ssl error from untrusted host  "www.hipchat.com"
      [08:11:55][void __thiscall OnlineStatus::platformSpecificNetworkUpdated(bool):299] networkUpdated: isUp =  true
      [08:11:55][void __thiscall AbstractOnlineStatus::checkOnlineStatus(void):196] platform online state =  true
      [08:11:55][void __thiscall AbstractOnlineStatus::doSecondaryCheck(bool):205] Do secondary online check
      [08:11:55][void __thiscall AbstractOnlineStatus::doSecondaryCheck(bool):218] cloud path
      [08:11:55][void __thiscall AbstractOnlineStatus::doSecondaryCheck(bool):264] onlineStatusUrl check:  "https://api.hipchat.com/v2/health-check"
      [08:11:55][void __thiscall AbstractOnlineStatus::handleReplyFinished(class QNetworkReply *):126] no errors from onlineStatusCheck
      [08:11:55][void __thiscall AbstractOnlineStatus::handleOnlineStatusResult(bool):179] handleOnlineStatusResult no change :  true
      [08:12:04][void __thiscall AuthHelper::handleSslErrors(class QNetworkReply *,const class QList<class QSslError> &):288] Responded No to ignore sslErrors, shutting down.
      [08:12:04][void __thiscall AuthHelper::handleReplyFinished(class QNetworkReply *):315] oAuth Token error:  QNetworkReply::NetworkError(SslHandshakeFailedError) :  "SSL handshake failed"
      [08:12:04][void __thiscall AuthHelper::handleReplyFinished(class QNetworkReply *):359] throwing away the login data and going back to landing page
      Warning: [08:12:04][:0] 
      

      Expected Results

      Client remembers user credentials

      Actual Results

      Client loses user credentials and forces user to re-login

      Notes

      • It may happen on unsecured networks
      • The certificate error is random

      Attachments

        Activity

          People

            Unassigned Unassigned
            mabdrahim Syahrul
            Archiver:
            mandreacchio Michael Andreacchio

            Dates

              Created:
              Updated:
              Resolved:
              Archived: