self-signed certificate warning

mfoss — Tue, 22 Mar 2005 10:54:00 +0000

I had a go making a self-signing certificate [...] When I ticked the "Use SSL" thing in PSI, it then came up with an error: "The xxx certificate failed authenticity the test. Reason: Certificate is self-signed"

It's not an error, but a warning. You can:

Click on 'Continue', or similar every time you connect.
Configure Psi to not show this message.
Get a certificate not self-signed.
Install the server certificate on your client (instructions in spanish).

configured it like so: {5223, ejabberd_c2s, [{access, c2s}, ssl, {certfile, "./ejabber.pem"}]},

ejabberd 0.7.5 added support for STARTTLS over 0.7, so the configuration file needs some changes:

not use 'ssl' option
use 'starttls' to accept plain and STARTTLS connections
use 'tls' to accept SSL connections.

So, the 'listen' section on your ejabberd.cfg should be similar to:

{5222, ejabberd_c2s, [{access, c2s}, {shaper, c2s_shaper},
                      starttls, {certfile, "./ejabber.pem"}]},
{5223, ejabberd_c2s, [{access, c2s},
                      tls, {certfile, "./ejabber.pem"}]},

I hope everything will work fine after doing those changes.

Opps!

tfindlay — Tue, 22 Mar 2005 05:14:08 +0000

Correction, I got the HTTP console working, I forgot to add the "/admin" bit haha!

Still stuck on the SSL problem though...

ejabberd - Comments for "SSL &amp; PSI trouble + HTTP no lnoger working"

self-signed certificate warning

Opps!

ejabberd - Comments for "SSL & PSI trouble + HTTP no lnoger working"