If the TLS negotiation succeeds, openfire will return to the client the correct tag <proceed xmlns="urn:ietf:params:xml:ns:xmpp-tls"/>.
However, if it fails, openfire will return an invalid tag <failure xmlns="urn:ietf:params:xml:ns:xmpp-tls">. Please note that the tag is not properly closed.
The correct response is <failure xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> and it appears in 2 places
- org.jivesoftware.openfire.net.SocketReadingMode.negotiateTLS
- org.jivesoftware.openfire.net.StanzaHandler.negotiateTLS