ssl handshake error

[msomma]

Application stopped working with error get_token error: 139754876213120:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1262:SSL alert number 40

unable to run it anymore

[emme73]

error is generated on test.js at line 35 because is defined a non-working token on line 15
I commented out line 15, but got a SSL hangout error on requesting new token (rturned 'undefined')

[lcorsini]

I tried the ruby version, and the problem to me is that SSL3 is broken on most ACs still using DH key exchange, you need to set a specific cipher on the client in order to deny DH key exchange
in ruby I did this:
context.ciphers = 'HIGH:!DH:!aNULL'
searching I found something similar for node, but I can't find it anymore

[emme73]

uhm... quite interesting....
don't know how to do that on NodeJS, but I'm interested in the Ruby workaround...
maybe this is not the right place to talk abut, but where exactely did you put the "context.ciphers = 'HIGH:!DH:!aNULL'" statement?
thanks

[lcorsini]

the ruby code is also from Daniel and hosted here:
https://bitbucket.org/CloCkWeRX/samsung-remote
there is a file name lib/samsung.rb
where it says:
context = OpenSSL::SSL::SSLContext.new
you need to add below that line this code:
context.ciphers = 'HIGH:!DH:!aNULL'
with this mod you can use the ruby code to get the token and see status command, it's just an example, but it's a start (I'm interested in get it work in homebridge and home-assistant)

I've also tried to talk with the AC using openssl command, using the procedure from openhab forums:
https://community.openhab.org/t/samsung-ac-binding/9323/2
which uses a certificate taken from the app.
openssl s_client -connect 192.168.1.166:2878 -cert cert.pem -cipher 'HIGH:!DH:!aNULL'
then you can send commands directly like:
<Request Type="GetToken"/>