Ejabberd on Sub-domain > SSL issue

Hi All,

I'm struggling with this issue since a few days and can't seem to get around it.

Website is mydomain.com
Ejabberd is im.mydomain.com

Both are hosted on 2 separate servers.

mydomain.com & im.mydomain.com have their own SSL certificates.

When connecting to im.mydomain.com I get SSL error saying:

************
Accept Mismatching Server name: Server could not authenticate as mydomani.com. The certificate is only valid for im.conversity.net
************

What is the correct way to handle this:

1. Should I install mydomain.com's SSL certificate on im.mydomain.com?
2. Should I generate SSL certificate for im.mydomain.com with SAN of mydomain.com?
3. Should I copy certificates of both im.mydomain.com & mydomain.com in the .pem file envoked in ejabberd.yml
Or is there another approach to this issue?

What is the correct way to do this?

Please help.

Thanks,
Sans

I found the solution. When

I found the solution.
When requesting a cert for im.mydomain.com, you need to include domain.com in SAN.
Hope this helps others too.

Syndicate content