[JDEV] problems with SSL support

[Chris Pile]

It's worth double checking your config since there is a small typo
IIRC.  It should look like this:

      <ip port="5222"/>
      <ssl port="5223">my ip</ssl>

    <ssl>
      <key ip="my ip">./certs/ssl-keypair.pem</key>
    </ssl>

Have a read of:
http://mailman.jabber.org/pipermail/jadmin/2001-February/000165.html
(I still get the error mentioned in this post when running on FreeBSD)


Chris.


kadokev at msg.net wrote:
> 
> [ Charset ISO-8859-1 unsupported, converting... ]
> > An easy way to test if your server is listening and more importantly
> > handling ssl correctly, you can use one of the tools that comes with openssl
> >
> > if you try
> > openssl s_client -connect your.ip.goes.here:5223
> >
> > This tool just tries to establish the SSL connection by doing the SSL
> > handshaking.
> 
> In my case, my jabberd is not opening up that port at all- no listening socket,
> thus no SSL connections. netstat proves this, as does this:
> 
> $ openssl s_client -connect 192.168.1.12:5223
> connect: Connection refused
> connect:errno=61
> 
> I'm not sure if there's some finicky part of the configuration that I am
> missing, or if this is a bug with the openSSL libraries and jabber on FreeBSD.
> 
> > -----Original Message-----
> > I'm having some problems trying to get SSL (on port 5223) working, using
> > jabber-1.4 on FreeBSD 4.2. I've tried the latest CVS with identical results.
> >
> > >From my understanding of the documentation and discussion of SSL support,
> > I have configured everything correctly, however the jabberd never actually
> > opens a listening port for 5223?
> >
> >
> > Here's the relevant snippets of my jabber.xml:
> >
> > ...
> >       </karma>
> >       <ip port="5222"/>
> >
> >       <ssl port="5223">192.168.1.12</ssl>
> >
> >     </pthcsock>
> >   </service>
> >
> > ...
> >     </karma>
> >     <rate points="5" time="25"/>
> >
> >     <ssl>
> >       <key ip='192.168.1.12'>./ssl/key.pem</key>
> >     </ssl>
> >
> >   </io>
> >
> > I'd appreciate hearing from anybody who has gotten the SSL support working
> > under FreeBSD, or pointers to updated documentation on this feature.
> >
> > Thanks,
> >
> > Kevin Kadow
> 
> _______________________________________________
> jdev mailing list
> jdev at jabber.org
> http://mailman.jabber.org/listinfo/jdev