SSL & PSI trouble + HTTP no lnoger working

Hi,

I has eJabberD 0.7 running fine with plain text auth and all was well. I upgraded to 7.5 and it warned me about not having OpenSSL, so I installed that and then upgraded eJabberD.

As I had OpenSSL installed, I had a go making a self-signing certificate (.PEM) file, and copied this over to my eJabberD folder configured it like so:
{5223, ejabberd_c2s, [{access, c2s}, ssl, {certfile, "./ejabber.pem"}]},

I started the server and it all looked good :)

When I ticked the "Use SSL" thing in PSI, it then came up with an error:
"The xxx certificate failed authenticity the test. Reason: Certificate is self-signed"

I tried switching the SSL option off, to try and connect via plain text again, and this doesnt seem to work anymore either.

I thought I'd go to my HTTP console and check out what was happening, only to find that doesnt work either! I connect to my IP address port 5280 and the console registers the GET / request, but the browser comes up with a 404 ?

Opps!

Correction, I got the HTTP console working, I forgot to add the "/admin" bit haha!

Still stuck on the SSL problem though...

self-signed certificate warning

I had a go making a self-signing certificate [...] When I ticked the "Use SSL" thing in PSI, it then came up with an error: "The xxx certificate failed authenticity the test. Reason: Certificate is self-signed"

It's not an error, but a warning. You can:

  • Click on 'Continue', or similar every time you connect.
  • Configure Psi to not show this message.
  • Get a certificate not self-signed.
  • Install the server certificate on your client (instructions in spanish).

configured it like so: {5223, ejabberd_c2s, [{access, c2s}, ssl, {certfile, "./ejabber.pem"}]},

ejabberd 0.7.5 added support for STARTTLS over 0.7, so the configuration file needs some changes:

  • not use 'ssl' option
  • use 'starttls' to accept plain and STARTTLS connections
  • use 'tls' to accept SSL connections.
So, the 'listen' section on your ejabberd.cfg should be similar to:
{5222, ejabberd_c2s, [{access, c2s}, {shaper, c2s_shaper},
                      starttls, {certfile, "./ejabber.pem"}]},
{5223, ejabberd_c2s, [{access, c2s},
                      tls, {certfile, "./ejabber.pem"}]},

I hope everything will work fine after doing those changes.

Syndicate content